last executing test programs: 2m22.362100302s ago: executing program 3 (id=426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() rt_sigtimedwait(&(0x7f0000000280)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xd6147000) mlockall(0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) 2m21.087095804s ago: executing program 3 (id=445): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m21.013715511s ago: executing program 3 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002bc0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x23e, 0x0, 0x4570, 0x0, 0x10001, 0xfffffeff, 0x1ff, 0xfffff801, 0x7fff, 0x200, 0xf, 0x2, 0x3, 0x3, 0x200, 0x0, 0x2, 0x80000000, 0x8, 0x3, 0x0, 0x9021, 0x3, 0xa3e, 0x5, 0x7ff, 0xe, 0x5, 0x3, 0x1da, 0x2, 0x5, 0x1, 0x80000000, 0x4f, 0x9, 0xfffffff9, 0x2, 0x2, 0xffff8001, 0xfffffff8, 0x7ff, 0x1ff, 0xf, 0x80000000, 0x218, 0x2, 0x8, 0x8, 0x9, 0x96e5, 0x1b36, 0x8, 0x40, 0x5, 0xb, 0x8001, 0xd461, 0x0, 0x2, 0x6000000, 0x6, 0xf510, 0x4, 0x3e, 0xfffffffe, 0x46, 0x4, 0x40, 0xffffffe5, 0xfffffffe, 0xffffff7f, 0x0, 0x7, 0xce8d, 0x42c, 0x8000, 0x3, 0x5, 0x2, 0x6, 0xb, 0x40, 0x96, 0x7, 0x0, 0x0, 0x10000, 0x4, 0x6, 0x0, 0x8, 0x9, 0xffdf, 0x5, 0x8b6, 0x5, 0x0, 0x4, 0x1, 0x8, 0x3, 0x40, 0xc6, 0x1707, 0x8, 0x3, 0xd, 0xd, 0x3, 0x5, 0xfffffffe, 0x81, 0x3, 0x108, 0x6, 0x80000001, 0x7, 0x10000, 0x8, 0x2, 0x0, 0x38dc, 0x3, 0x7ff, 0x7, 0x10, 0x0, 0xad07, 0x3, 0x6b, 0x800, 0xfa, 0x3ff, 0x9, 0x0, 0x8, 0x9, 0xffffffff, 0xff, 0x3, 0x8001, 0xfffffff2, 0x7, 0xffff33c5, 0x2, 0x7, 0x74, 0x1, 0x88, 0x1, 0x7, 0x87, 0x7, 0x3, 0x4, 0x5, 0x4, 0x3ff, 0x7fffffff, 0xffff8000, 0x7, 0x400, 0x4, 0x0, 0x180000, 0x2, 0x8, 0x4, 0x6, 0x51c35bad, 0x162, 0x6, 0x1, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x8000, 0x6, 0x3, 0x0, 0x9, 0x8, 0xb5f, 0x0, 0x7fffffff, 0x1, 0xfffff96c, 0xaac, 0x89cf, 0x2, 0x9, 0x1, 0x2, 0x3, 0x2, 0x80000001, 0x6, 0x0, 0xac, 0x100, 0x8, 0x1eb, 0x2, 0x5, 0x9, 0xff, 0xc, 0x0, 0x1ff, 0x6, 0x3, 0x70000, 0xc967, 0xf, 0x5, 0x1, 0x40000000, 0x100, 0x2, 0x6, 0xe, 0x4, 0x10, 0x9, 0x6ec5, 0x8f8, 0x6, 0x80000001, 0x8f, 0x5, 0x0, 0x100, 0xa, 0xa4d9, 0x7, 0x3, 0x3c, 0xcff7, 0x4e2d, 0x7, 0x7, 0x8, 0xc, 0xb, 0x0, 0x71c2, 0xf911, 0xc401, 0x9, 0x80000000, 0xb, 0x1, 0x5f, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5, 0x7, 0xe, {0x8, 0x1, 0x3, 0xc, 0x1000, 0x1}, {0x4, 0x1, 0x2, 0x7, 0x2, 0x2}, 0xfff, 0xa3b4, 0xfff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xa3, 0x6, 0x5, 0x0, 0x5, 0x2, 0x80, 0x1, 0x619e, 0x5, 0xc8, 0x4, 0xbd, 0x60a1bb9d, 0x1, 0x581, 0x2, 0x6, 0x9, 0x46, 0x9, 0xd452, 0xf, 0x7ff, 0xfffff441, 0xffffffff, 0x1, 0xfffffff9, 0xfff, 0x40, 0x4, 0x6, 0x8, 0x7, 0x7, 0x0, 0x7, 0x6, 0xffffffff, 0x0, 0x10001, 0xd, 0x0, 0x8876, 0xfffffff9, 0x1, 0xc6, 0x1, 0x0, 0x2, 0x4, 0xe, 0x2fea, 0xfffffffa, 0x0, 0xff, 0x6c2d, 0x6, 0x8, 0xe, 0xfff, 0x2, 0x1, 0x7, 0x3ff, 0x400, 0x6, 0x9, 0xffff, 0x1, 0x8, 0x4, 0x19, 0xb, 0x8, 0x7, 0xe, 0x0, 0x1, 0x2, 0x8, 0x4000, 0x2, 0x5, 0x5, 0xd7, 0x7, 0x7f, 0x6, 0x5, 0x9, 0x3, 0x3, 0xa36, 0x6, 0xe, 0x8ccf, 0x0, 0x0, 0x0, 0x5, 0xf1c, 0x2, 0x0, 0x8, 0x22d, 0x7, 0x7, 0x2, 0x1, 0x1, 0x9, 0x4, 0x3, 0x80, 0x0, 0x47b02ef0, 0xfffffffc, 0xffffffff, 0x997c, 0x8, 0x5, 0xfffffff4, 0x2, 0xfffffffa, 0xfff, 0x80000000, 0x6, 0xc27, 0x100, 0xf2944168, 0x3, 0x3, 0x3, 0x3, 0x4, 0x7ff, 0x0, 0x2, 0x400, 0x88f, 0x9, 0x80000001, 0x3ff, 0x99fd, 0x1, 0x7, 0x6, 0x5, 0x0, 0x3, 0x10, 0xae6, 0x10, 0x401, 0x0, 0x9, 0x7f, 0x0, 0xbba, 0x1, 0x9, 0x10, 0x7f, 0xbf, 0x2, 0x7, 0xb, 0xffff, 0x2, 0x4, 0x4, 0x6, 0x9, 0x5b2, 0x4, 0xeb, 0xba61, 0x6, 0xfffffff9, 0xfff, 0xf7cf, 0x370, 0x7, 0x2, 0x8, 0x40, 0x1, 0xc7d6, 0x1ff, 0x5, 0x4e94, 0x9, 0x6, 0x2e, 0x5, 0x6f7, 0x24bc, 0x7, 0xd, 0x7, 0x1, 0x3, 0x5, 0x1, 0x4, 0x5, 0x4, 0x3, 0x0, 0x3ff, 0x5, 0x279, 0x7f, 0xbdf, 0x0, 0x5, 0x3, 0x8, 0x9, 0xcd, 0x4, 0x7fffffff, 0xc216, 0x9ca3, 0x5, 0x23, 0x0, 0x8, 0x4, 0xc09, 0x100, 0x0, 0x0, 0x2, 0x1, 0x80000001, 0x80, 0x2, 0x2626, 0x1ff, 0x1, 0x26, 0x5, 0x7, 0x7, 0x8, 0x8, 0x8, 0x71a, 0x4, 0x8, 0x59bf, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 2m20.904580493s ago: executing program 3 (id=448): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 2m20.375144087s ago: executing program 3 (id=457): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x62020600) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585", @ANYRES64], 0x0) 2m19.892404907s ago: executing program 3 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 2m19.892212467s ago: executing program 32 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 1m43.748904894s ago: executing program 4 (id=1071): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000003c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42042, 0x138) fallocate(r0, 0x10, 0x10c01, 0x8000) 1m43.062180995s ago: executing program 4 (id=1077): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x6, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001600)={r1}, 0xc) listen(0xffffffffffffffff, 0x1) open(0x0, 0x24842, 0xf9) poll(0x0, 0x0, 0xb8) 1m42.700608802s ago: executing program 4 (id=1085): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbe}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m42.441606049s ago: executing program 4 (id=1090): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m41.778377008s ago: executing program 4 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='100', 0x3) io_uring_setup(0x2bd2, &(0x7f0000000300)={0x0, 0x661f, 0x0, 0x1, 0x194}) epoll_create(0x7) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="1c00000000000000", 0x8, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 1m41.4631099s ago: executing program 4 (id=1101): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10680, 0x0, 0xfffffffd, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f00000002c0)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 1m41.420763264s ago: executing program 33 (id=1101): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10680, 0x0, 0xfffffffd, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f00000002c0)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 2.558049565s ago: executing program 5 (id=2483): r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x38, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000240)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.334605328s ago: executing program 6 (id=2486): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map=r0, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) r1 = add_key$fscrypt_v1(&(0x7f00000009c0), 0x0, &(0x7f0000000a40)={0x0, "c694ef4b3792828d9d7d67e4e3ea7f4993d2127c4a92cb1e61f64b18f1f110afb027899e2d01c12e67367fa6cca9b88dcfc9d15a3a271b34351c934d95487d7e", 0x3a}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000980)='rxrpc_s\x00', &(0x7f0000000ac0)=@keyring={'key_or_keyring:', r1}) 2.143581348s ago: executing program 2 (id=2490): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000002700)={0x6}, 0x10) write(r0, &(0x7f0000002740)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000002780), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002900), r0) 1.665830517s ago: executing program 5 (id=2492): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x8, 0xfffffffd, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x3c84, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000bc0)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.54565697s ago: executing program 2 (id=2493): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @random="94dc344ada25"}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1.329585572s ago: executing program 6 (id=2494): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) clock_gettime(0xffff8001, 0x0) write$cgroup_int(r1, &(0x7f0000000280), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x9ffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.282951287s ago: executing program 2 (id=2495): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x800) r1 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) eventfd(0x3ff) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.260103629s ago: executing program 5 (id=2497): ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x10a0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x2800, &(0x7f0000000240)={&(0x7f0000000800)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.244405551s ago: executing program 0 (id=2498): r0 = epoll_create(0x20000006) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x4}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x8}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x8}) 1.243822261s ago: executing program 1 (id=2499): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x551, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x190c1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./sys\x00', 0x0, 0x100020, 0x0) setns(0xc9, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000940)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000980)=0x80000000, 0x4) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e20, @local}, 0x10) 1.106878945s ago: executing program 0 (id=2500): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000024000180060005004e2300000600010002"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x8) mount$nfs(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), 0x3800009, &(0x7f0000000240)=ANY=[@ANYRES32=r0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000000000000000000000000000000000000000000006a2f07e926eb98d49b000feea13203ab74aeb5302c5e869ec639211792d4075a92f59a1fd1e4cebf16b8a7baa7e433"], 0x50) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000340)={0x12}) 1.023675794s ago: executing program 6 (id=2501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000640)=@ccm_128={{0x304}, "0100000000620446", "aeddfef91aa9617553bf6b23f345db0c", "2c061666", "5323ec7a99f51a40"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8040) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) sendto$inet6(r0, &(0x7f0000000740)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)="319842f1", 0x3fec) 1.008205576s ago: executing program 0 (id=2502): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000004c0), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000500)=0xcde, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) shutdown(r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r2) 989.166567ms ago: executing program 1 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) close(0x3) 988.865977ms ago: executing program 5 (id=2504): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7be"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 965.03118ms ago: executing program 0 (id=2505): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x2c80, 0x0, 0x1, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000019080), &(0x7f00000190c0)='./file0\x00', 0x0, &(0x7f0000019140)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000019300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000019580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000195c0)='./sys\x00', &(0x7f0000019600)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000019780)='ext3\x00', &(0x7f00000197c0)='./file1\x00', 0x8004, &(0x7f0000019800)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000019c00)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000019640)='.\x00', 0x2) 932.872473ms ago: executing program 6 (id=2506): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2f28}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x1205c0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000800)={[], [{@fowner_gt}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fc07002503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x6808) 932.452313ms ago: executing program 5 (id=2507): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000440)='./file1\x00', 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2cb, &(0x7f0000000580)="$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") socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0100001900010000000000fedbdf250a010100000000000000000000000000ac14144400000000", @ANYRES32=0x0, @ANYBLOB="0000000000002000000000000000000000000000000000000200000000000000000000000000000000000000010000000500000000000000fbffffffffffffff000000000000000000000000400040000000000000000002000000040000000002000000000000000001000000000000c4000500fc020000000000000000000000000001000004d43c000000020000000000ddffffffffffffffffff2a440aba1a2edfeb040000000b000000000000000200000000000000000000000000000000000000000004d53300000002000000640101000000000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0xd, 0x5, &(0x7f0000000f00)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000f40)='GPL\x00'}, 0x80) 927.126074ms ago: executing program 1 (id=2508): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 809.153576ms ago: executing program 1 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000540)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x80) 733.255894ms ago: executing program 5 (id=2510): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r3 = open(&(0x7f0000000000)='.\x00', 0x100000, 0x115) symlinkat(&(0x7f00000000c0)='./file2\x00', r3, &(0x7f0000000180)='./dev\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000080)) 732.766024ms ago: executing program 1 (id=2511): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0xa96) connect$inet(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 724.494445ms ago: executing program 6 (id=2512): perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10680, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f0000000a00)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/strings/0x409/../file0\x00', 0x1ff) 552.903583ms ago: executing program 2 (id=2513): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x7ffffe, 0x43, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x9100, &(0x7f0000000240)={0x6, 0x8a, 0x40000}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000002b4000000000000000018"], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000001b80)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 436.915195ms ago: executing program 1 (id=2514): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002780)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000004, 0x0, 0x9, 0x800002, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f00000028c0)='./file0\x00', 0x810, &(0x7f0000002900)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000002940)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") write$usbip_server(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="e72c99f3fc746300000003000000960000000000000001000008000000000800000000000000070000000f6700e5ffffff0000000000000000"], 0x30) setresuid(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000ac0), 0x18, 0x1000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) 398.450998ms ago: executing program 6 (id=2515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) open(&(0x7f0000000040)='./bus\x00', 0x10842, 0xc0) write(r1, &(0x7f0000000200)="c78885e449c2ccd4f3c941", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 280.579621ms ago: executing program 2 (id=2516): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x5fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x28040}, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r0, &(0x7f0000001040)=@known='security.selinux\x00', &(0x7f00000001c0)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x8000) 169.808502ms ago: executing program 2 (id=2517): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 162.143793ms ago: executing program 0 (id=2518): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x18082d, 0x0) 0s ago: executing program 0 (id=2519): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000140), &(0x7f00000001c0)=@tcp=r2}, 0x20) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 175.369:940): avc: denied { nlmsg_read } for pid=7595 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 129.436039][ T29] audit: type=1400 audit(1793388175.369:941): avc: denied { audit_write } for pid=7595 comm="syz.0.1473" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.447206][ T7599] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 129.483443][ T7599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.491753][ T7602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=7602 comm=syz.0.1473 [ 129.571373][ T7605] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1475'. [ 129.700399][ T7617] loop6: detected capacity change from 0 to 512 [ 129.734265][ T7607] loop5: detected capacity change from 0 to 512 [ 129.745738][ T7617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.745815][ T7617] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.852444][ T7623] uprobe: syz.0.1482:7623 failed to unregister, leaking uprobe [ 130.026050][ T29] audit: type=1400 audit(1793388175.949:942): avc: denied { connect } for pid=7635 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.127479][ T7607] bio_check_eod: 219 callbacks suppressed [ 130.127512][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.127512][ T7607] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 130.152126][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.152126][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.153204][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.153204][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.154326][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.154326][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.155127][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.155127][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.155706][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.155706][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.156576][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.156576][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.157426][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.157426][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.263267][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.263267][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.265004][ T7607] syz.5.1476: attempt to access beyond end of device [ 130.265004][ T7607] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.391735][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.398377][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.398642][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.463218][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.464769][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.581654][ T7658] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1494'. [ 130.581677][ T7658] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1494'. [ 130.937955][ T7677] netlink: 'syz.0.1503': attribute type 4 has an invalid length. [ 131.503154][ T7703] lo: left promiscuous mode [ 131.581959][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 131.582088][ T29] audit: type=1326 audit(1793388177.499:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582119][ T29] audit: type=1326 audit(1793388177.499:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582211][ T29] audit: type=1326 audit(1793388177.499:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582264][ T29] audit: type=1326 audit(1793388177.499:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582299][ T29] audit: type=1326 audit(1793388177.499:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582388][ T29] audit: type=1326 audit(1793388177.499:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582425][ T29] audit: type=1326 audit(1793388177.499:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582455][ T29] audit: type=1326 audit(1793388177.509:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582552][ T29] audit: type=1326 audit(1793388177.509:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.582589][ T29] audit: type=1326 audit(1793388177.509:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.2.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 131.881821][ T7715] netlink: 'syz.5.1516': attribute type 4 has an invalid length. [ 131.907391][ T7717] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 131.922894][ T7717] bond6: entered promiscuous mode [ 131.923097][ T7717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.941938][ T7717] vlan4: entered allmulticast mode [ 131.941961][ T7717] bond6: entered allmulticast mode [ 131.953268][ T7717] bond6: (slave bridge2): making interface the new active one [ 131.953297][ T7717] bridge2: entered promiscuous mode [ 131.953388][ T7717] bridge2: entered allmulticast mode [ 131.968180][ T7717] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 132.129407][ T7732] netlink: 'syz.0.1534': attribute type 29 has an invalid length. [ 132.544097][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 132.611124][ T7757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.669877][ T7764] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 132.680363][ T7764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.695217][ T7764] dummy0: left promiscuous mode [ 132.697539][ T7764] bond2: (slave dummy0): making interface the new active one [ 132.712957][ T7764] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 132.716831][ T7764] : renamed from dummy0 (while UP) [ 132.831633][ T7773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.869972][ T7773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.907680][ T7773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.941705][ T7773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.943016][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1544'. [ 132.972331][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1544'. [ 133.007291][ T7786] loop6: detected capacity change from 0 to 512 [ 133.016884][ T7786] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 133.016933][ T7786] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.040277][ T7786] EXT4-fs (loop6): 1 truncate cleaned up [ 133.040691][ T7786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.070875][ T32] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.080161][ T7790] FAULT_INJECTION: forcing a failure. [ 133.080161][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 133.080256][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.5.1548 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 133.080408][ T7790] Tainted: [W]=WARN [ 133.080430][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.080473][ T7790] Call Trace: [ 133.080494][ T7790] [ 133.080515][ T7790] __dump_stack+0x1d/0x30 [ 133.080600][ T7790] dump_stack_lvl+0x95/0xd0 [ 133.080773][ T7790] dump_stack+0x15/0x1b [ 133.080946][ T7790] should_fail_ex+0x259/0x270 [ 133.081047][ T7790] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 133.081184][ T7790] should_failslab+0x8c/0xb0 [ 133.081303][ T7790] __kmalloc_cache_noprof+0x5d/0x3e0 [ 133.081407][ T7790] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 133.081554][ T7790] __se_sys_timerfd_create+0xe2/0x2a0 [ 133.081639][ T7790] __x64_sys_timerfd_create+0x31/0x40 [ 133.081730][ T7790] x64_sys_call+0x1ddb/0x2550 [ 133.081864][ T7790] do_syscall_64+0x112/0x360 [ 133.081968][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.082040][ T7790] RIP: 0033:0x7fbd9860f559 [ 133.082093][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.082160][ T7790] RSP: 002b:00007fbd97067028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 133.082224][ T7790] RAX: ffffffffffffffda RBX: 00007fbd98895fa0 RCX: 00007fbd9860f559 [ 133.082335][ T7790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 133.082389][ T7790] RBP: 00007fbd986a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.082431][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.082466][ T7790] R13: 00007fbd98896038 R14: 00007fbd98895fa0 R15: 00007ffc57485648 [ 133.082552][ T7790] [ 133.170029][ T32] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.178658][ T32] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.211693][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.311849][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.322374][ T7798] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 133.344286][ T7798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 133.357084][ T7798] dummy0: left promiscuous mode [ 133.362874][ T7798] bond7: (slave dummy0): making interface the new active one [ 133.363730][ T7798] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 133.376314][ T7798] : renamed from dummy0 (while UP) [ 133.469950][ T7811] rxe_eth0 speed is unknown, defaulting to 1000 [ 133.501222][ T7814] ./dev/sda1: Can't lookup blockdev [ 134.368131][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 134.474243][ T38] IPVS: starting estimator thread 0... [ 134.561721][ T7841] IPVS: using max 2256 ests per chain, 112800 per kthread [ 134.763040][ T7847] tunl0: left promiscuous mode [ 134.763132][ T7847] gre0: left promiscuous mode [ 134.763305][ T7847] gretap0: left promiscuous mode [ 134.763379][ T7847] erspan0: left promiscuous mode [ 134.763458][ T7847] ip_vti0: left promiscuous mode [ 134.763528][ T7847] ip6_vti0: left promiscuous mode [ 134.763678][ T7847] sit0: left promiscuous mode [ 134.763762][ T7847] ip6tnl0: left promiscuous mode [ 134.763837][ T7847] ip6gre0: left promiscuous mode [ 134.763898][ T7847] syz_tun: left promiscuous mode [ 134.763992][ T7847] ip6gretap0: left promiscuous mode [ 134.764137][ T7847] bridge0: left promiscuous mode [ 134.764619][ T7847] vcan0: left promiscuous mode [ 134.764707][ T7847] bond0: left promiscuous mode [ 134.764927][ T7847] team0: left promiscuous mode [ 134.765118][ T7847] dummy0: left promiscuous mode [ 134.765249][ T7847] nlmon0: left promiscuous mode [ 134.765379][ T7847] batadv0: left promiscuous mode [ 134.765543][ T7847] vxcan0: left promiscuous mode [ 134.765653][ T7847] vxcan1: left promiscuous mode [ 134.765731][ T7847] veth0: left promiscuous mode [ 134.765911][ T7847] veth1: left promiscuous mode [ 134.765982][ T7847] wg0: left promiscuous mode [ 134.766389][ T7847] wg1: left promiscuous mode [ 134.766445][ T7847] wg2: left promiscuous mode [ 134.766563][ T7847] veth0_to_bridge: left promiscuous mode [ 134.766757][ T7847] veth1_to_bridge: left promiscuous mode [ 134.766927][ T7847] veth0_to_bond: left promiscuous mode [ 134.767086][ T7847] bond_slave_0: left promiscuous mode [ 134.767155][ T7847] veth1_to_bond: left promiscuous mode [ 134.767258][ T7847] bond_slave_1: left promiscuous mode [ 134.767401][ T7847] veth0_to_team: left promiscuous mode [ 134.767506][ T7847] team_slave_0: left promiscuous mode [ 134.767599][ T7847] veth1_to_team: left promiscuous mode [ 134.767661][ T7847] team_slave_1: left promiscuous mode [ 134.767845][ T7847] veth1_to_batadv: left promiscuous mode [ 134.768014][ T7847] batadv_slave_1: left promiscuous mode [ 134.768125][ T7847] xfrm0: left promiscuous mode [ 134.768228][ T7847] veth0_to_hsr: left promiscuous mode [ 134.768438][ T7847] veth1_to_hsr: left promiscuous mode [ 134.768569][ T7847] hsr0: left promiscuous mode [ 134.768705][ T7847] veth1_virt_wifi: left promiscuous mode [ 134.768865][ T7847] veth0_virt_wifi: left promiscuous mode [ 134.769089][ T7847] vlan1: left promiscuous mode [ 134.799108][ T7847] macvlan0: left promiscuous mode [ 134.799259][ T7847] macvlan1: left promiscuous mode [ 134.799443][ T7847] ipvlan0: left promiscuous mode [ 134.799660][ T7847] ipvlan1: left promiscuous mode [ 134.800101][ T7847] macvtap0: left promiscuous mode [ 134.800425][ T7847] macsec0: left promiscuous mode [ 134.800646][ T7847] geneve0: left promiscuous mode [ 134.800776][ T7847] geneve1: left promiscuous mode [ 134.801049][ T7847] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 134.801266][ T7847] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 134.801581][ T7847] netdevsim netdevsim6 netdevsim2: left promiscuous mode [ 134.802201][ T7847] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 135.379179][ T38] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.379230][ T38] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.379267][ T38] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.379383][ T38] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.844369][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 135.844401][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 136.942430][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1610'. [ 137.009040][ T7899] syz.5.1592 (7899) used greatest stack depth: 8952 bytes left [ 137.265148][ T7955] loop6: detected capacity change from 0 to 256 [ 138.021962][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 138.021983][ T29] audit: type=1400 audit(1793388183.949:1117): avc: denied { cmd } for pid=7974 comm="syz.5.1624" path="socket:[21803]" dev="sockfs" ino=21803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.260774][ T7993] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1631'. [ 139.147229][ T8004] ip_tables: iptables: counters copy to user failed while replacing table [ 139.180868][ T8004] ip_tables: iptables: counters copy to user failed while replacing table [ 139.248464][ T8014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.284660][ T29] audit: type=1400 audit(1793388185.209:1118): avc: denied { read } for pid=8015 comm="syz.0.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.444252][ T8020] 9p: Bad value for 'rfdno' [ 139.499464][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1644'. [ 139.796879][ T7986] Set syz1 is full, maxelem 65536 reached [ 140.181677][ T8051] syz.5.1653 (8051): drop_caches: 0 [ 140.418517][ T8033] Driver unsupported XDP return value 0 on prog (id 326) dev N/A, expect packet loss! [ 140.483041][ T29] audit: type=1400 audit(1793388186.409:1119): avc: denied { accept } for pid=8056 comm="syz.6.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.532294][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1660'. [ 140.542255][ T8058] v: renamed from macvlan1 [ 140.601050][ T29] audit: type=1400 audit(1793388186.529:1120): avc: denied { read } for pid=3018 comm="dhcpcd" name="n56" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.601090][ T29] audit: type=1400 audit(1793388186.529:1121): avc: denied { open } for pid=3018 comm="dhcpcd" path="/run/udev/data/n56" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.602906][ T29] audit: type=1400 audit(1793388186.529:1122): avc: denied { getattr } for pid=3018 comm="dhcpcd" path="/run/udev/data/n56" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.810675][ T8087] netlink: 'syz.0.1665': attribute type 33 has an invalid length. [ 140.810737][ T8087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1665'. [ 140.903336][ T29] audit: type=1400 audit(1793388186.829:1123): avc: denied { write } for pid=8079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.910220][ T29] audit: type=1400 audit(1793388186.839:1124): avc: denied { create } for pid=8079 comm="dhcpcd-run-hook" name="resolv.conf.v.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.910314][ T29] audit: type=1400 audit(1793388186.839:1125): avc: denied { write } for pid=8079 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.v.link" dev="tmpfs" ino=2150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.912600][ T29] audit: type=1400 audit(1793388186.839:1126): avc: denied { append } for pid=8079 comm="dhcpcd-run-hook" name="resolv.conf.v.link" dev="tmpfs" ino=2150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.446689][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1672'. [ 141.519497][ T8133] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 141.560088][ T8143] netlink: 'syz.5.1676': attribute type 11 has an invalid length. [ 141.560113][ T8143] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1676'. [ 141.609330][ T8133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.660871][ T8144] bond4: (slave veth9): Enslaving as an active interface with a down link [ 141.670714][ T8133] macvlan0: left promiscuous mode [ 141.700883][ T8147] netlink: 'syz.5.1678': attribute type 5 has an invalid length. [ 141.702659][ T8133] bond4: (slave macvlan0): Enslaving as an active interface with a down link [ 142.140786][ T8165] loop0: detected capacity change from 0 to 128 [ 142.254711][ T8170] batman_adv: batadv0: Adding interface: gretap2 [ 142.254730][ T8170] batman_adv: batadv0: The MTU of interface gretap2 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 142.254771][ T8170] batman_adv: batadv0: Interface activated: gretap2 [ 142.415842][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 142.479163][ T8184] FAULT_INJECTION: forcing a failure. [ 142.479163][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 142.479204][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.6.1690 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 142.479269][ T8184] Tainted: [W]=WARN [ 142.479279][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.479298][ T8184] Call Trace: [ 142.479309][ T8184] [ 142.479319][ T8184] __dump_stack+0x1d/0x30 [ 142.479353][ T8184] dump_stack_lvl+0x95/0xd0 [ 142.479385][ T8184] dump_stack+0x15/0x1b [ 142.479490][ T8184] should_fail_ex+0x259/0x270 [ 142.479534][ T8184] ? ipv6_add_dev+0x49c/0xb20 [ 142.479570][ T8184] should_failslab+0x8c/0xb0 [ 142.479632][ T8184] __kmalloc_cache_noprof+0x5d/0x3e0 [ 142.479719][ T8184] ? ipv6_add_dev+0x397/0xb20 [ 142.479758][ T8184] ? ipv6_add_dev+0x49c/0xb20 [ 142.479792][ T8184] ipv6_add_dev+0x49c/0xb20 [ 142.479939][ T8184] addrconf_notify+0x3ad/0x8e0 [ 142.479964][ T8184] ? __pfx_addrconf_notify+0x10/0x10 [ 142.480016][ T8184] raw_notifier_call_chain+0x72/0x1a0 [ 142.480057][ T8184] ? blake2s_update+0x12b/0x150 [ 142.480097][ T8184] call_netdevice_notifiers+0xb5/0x110 [ 142.480188][ T8184] register_netdevice+0x122d/0x13f0 [ 142.480236][ T8184] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 142.480309][ T8184] batadv_meshif_newlink+0x7d/0x90 [ 142.480341][ T8184] rtnl_newlink_create+0x1e4/0x4a0 [ 142.480425][ T8184] ? security_capable+0x7b/0x90 [ 142.480457][ T8184] ? netlink_ns_capable+0x86/0xa0 [ 142.480577][ T8184] rtnl_newlink+0x1255/0x1510 [ 142.480684][ T8184] ? mas_wr_store_entry+0x34df/0x5ac0 [ 142.480739][ T8184] ? try_charge_memcg+0x284/0xb30 [ 142.480820][ T8184] ? ktime_get+0x212/0x240 [ 142.480845][ T8184] ? __rcu_read_unlock+0x4e/0x70 [ 142.480917][ T8184] ? avc_has_perm_noaudit+0xac/0x160 [ 142.480954][ T8184] ? cred_has_capability+0x224/0x2a0 [ 142.480988][ T8184] ? selinux_capable+0x31/0x40 [ 142.481024][ T8184] ? security_capable+0x7b/0x90 [ 142.481046][ T8184] ? ns_capable+0x80/0xb0 [ 142.481071][ T8184] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.481144][ T8184] rtnetlink_rcv_msg+0x64b/0x720 [ 142.481177][ T8184] ? avc_has_perm_noaudit+0xac/0x160 [ 142.481205][ T8184] netlink_rcv_skb+0x11e/0x220 [ 142.481272][ T8184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.481390][ T8184] rtnetlink_rcv+0x1c/0x30 [ 142.481423][ T8184] netlink_unicast+0x665/0x740 [ 142.481471][ T8184] netlink_sendmsg+0x5ef/0x740 [ 142.481511][ T8184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.481585][ T8184] ____sys_sendmsg+0x54a/0x590 [ 142.481618][ T8184] ___sys_sendmsg+0x195/0x1e0 [ 142.481663][ T8184] __x64_sys_sendmsg+0xd4/0x160 [ 142.481773][ T8184] x64_sys_call+0x22ab/0x2550 [ 142.481802][ T8184] do_syscall_64+0x112/0x360 [ 142.481865][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.481896][ T8184] RIP: 0033:0x7f81f25bf559 [ 142.481917][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.481940][ T8184] RSP: 002b:00007f81f100f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.482026][ T8184] RAX: ffffffffffffffda RBX: 00007f81f2845fa0 RCX: 00007f81f25bf559 [ 142.482044][ T8184] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 142.482061][ T8184] RBP: 00007f81f2656b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.482076][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.482092][ T8184] R13: 00007f81f2846038 R14: 00007f81f2845fa0 R15: 00007ffc9bbd1c88 [ 142.482119][ T8184] [ 142.483512][ T8151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 142.852832][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1692'. [ 144.213770][ T8233] loop5: detected capacity change from 0 to 512 [ 144.280328][ T368] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.280385][ T368] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.280467][ T368] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.280499][ T368] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.284936][ T8233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1713: bg 0: block 385: padding at end of block bitmap is not set [ 144.285076][ T8233] loop5: lost filesystem error report for type 5 error -117 [ 144.287912][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 144.287938][ C0] EXT4-fs (loop5): initial error at time 1793388190: ext4_validate_block_bitmap:445 [ 144.287964][ C0] EXT4-fs (loop5): last error at time 1793388190: ext4_validate_block_bitmap:445 [ 144.370959][ T8233] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 144.371039][ T8233] loop5: lost filesystem error report for type 5 error -117 [ 144.372705][ T8233] EXT4-fs (loop5): 2 truncates cleaned up [ 144.374623][ T8233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.461580][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.522903][ T8257] syz_tun: entered allmulticast mode [ 144.538365][ T8257] pimreg: entered allmulticast mode [ 144.551506][ T8256] syz_tun: left allmulticast mode [ 145.323957][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 145.323976][ T29] audit: type=1400 audit(1793388191.249:1131): avc: denied { ioctl } for pid=8282 comm="syz.5.1731" path="socket:[22682]" dev="sockfs" ino=22682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.326204][ T29] audit: type=1400 audit(1793388191.249:1132): avc: denied { getopt } for pid=8282 comm="syz.5.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.496209][ T8281] ip_tables: iptables: counters copy to user failed while replacing table [ 146.756347][ T8312] loop0: detected capacity change from 0 to 512 [ 146.756708][ T8312] EXT4-fs: Ignoring removed bh option [ 146.757054][ T8312] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 146.757070][ T8312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.768456][ T8312] EXT4-fs (loop0): 1 truncate cleaned up [ 146.769427][ T8312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.226533][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.272640][ T29] audit: type=1400 audit(1793388193.199:1133): avc: denied { unmount } for pid=8328 comm="syz.1.1751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.485944][ T8344] loop0: detected capacity change from 0 to 1024 [ 147.512505][ T8344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.625602][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.034114][ T29] audit: type=1400 audit(1793388193.959:1134): avc: denied { setopt } for pid=8361 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.082030][ T8368] netlink: 'syz.6.1765': attribute type 1 has an invalid length. [ 148.100183][ T8368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.115433][ T8368] bond2: (slave geneve3): making interface the new active one [ 148.117561][ T8368] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 148.148108][ T38] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.148218][ T38] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.148930][ T38] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.148974][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.413344][ T8387] ip_tables: iptables: counters copy to user failed while replacing table [ 148.422941][ T8378] ip_tables: iptables: counters copy to user failed while replacing table [ 148.564158][ T8396] netlink: 'syz.1.1774': attribute type 4 has an invalid length. [ 148.579679][ T8383] loop6: detected capacity change from 0 to 512 [ 148.676663][ T8383] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1770: bg 0: block 385: padding at end of block bitmap is not set [ 148.694887][ T8383] loop6: lost filesystem error report for type 5 error -117 [ 148.697912][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 148.697935][ C0] EXT4-fs (loop6): initial error at time 1793388194: ext4_validate_block_bitmap:445 [ 148.697963][ C0] EXT4-fs (loop6): last error at time 1793388194: ext4_validate_block_bitmap:445 [ 148.734440][ T8383] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 148.734630][ T8383] loop6: lost filesystem error report for type 5 error -117 [ 148.775878][ T8383] EXT4-fs (loop6): 2 truncates cleaned up [ 148.794595][ T29] audit: type=1400 audit(1793388194.719:1135): avc: denied { setopt } for pid=8408 comm="syz.1.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.794970][ T29] audit: type=1400 audit(1793388194.719:1136): avc: denied { bind } for pid=8408 comm="syz.1.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.821143][ T8383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.869460][ T8413] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 149.196426][ T8415] loop5: detected capacity change from 0 to 512 [ 149.252607][ T8415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.254052][ T8415] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.720993][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.721951][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.780455][ T8431] sctp: [Deprecated]: syz.6.1785 (pid 8431) Use of int in max_burst socket option. [ 149.780455][ T8431] Use struct sctp_assoc_value instead [ 150.005901][ T29] audit: type=1400 audit(1793388195.929:1137): avc: denied { read } for pid=8441 comm="syz.0.1793" path="socket:[24766]" dev="sockfs" ino=24766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.162553][ T29] audit: type=1400 audit(1793388197.089:1138): avc: denied { ioctl } for pid=8477 comm="syz.0.1808" path="socket:[24470]" dev="sockfs" ino=24470 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.374202][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1814'. [ 151.441371][ T8493] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 151.441480][ T8493] netlink: 64543 bytes leftover after parsing attributes in process `syz.0.1815'. [ 151.480996][ T8498] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 151.507847][ T8498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.570804][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1819'. [ 151.606867][ T8498] bond1: (slave geneve1): making interface the new active one [ 151.621444][ T8498] bond1: (slave geneve1): Enslaving as an active interface with an up link [ 151.649135][ T368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.649221][ T368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.649280][ T368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.649322][ T368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.294569][ T8516] ip_tables: iptables: counters copy to user failed while replacing table [ 152.379228][ T8523] loop6: detected capacity change from 0 to 1024 [ 152.396792][ T29] audit: type=1400 audit(1793388198.319:1139): avc: denied { write } for pid=8510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.428468][ T8523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.472251][ T29] audit: type=1400 audit(1793388198.379:1140): avc: denied { write } for pid=8521 comm="syz.6.1823" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.504472][ T8527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.504494][ T8527] block device autoloading is deprecated and will be removed. [ 152.525537][ T29] audit: type=1400 audit(1793388198.449:1141): avc: denied { write } for pid=8521 comm="syz.6.1823" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.557333][ T29] audit: type=1400 audit(1793388198.479:1142): avc: denied { write } for pid=8521 comm="syz.6.1823" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.595007][ T8534] FAULT_INJECTION: forcing a failure. [ 152.595007][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 152.595095][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.5.1825 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 152.595136][ T8534] Tainted: [W]=WARN [ 152.595143][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.595159][ T8534] Call Trace: [ 152.595169][ T8534] [ 152.595180][ T8534] __dump_stack+0x1d/0x30 [ 152.595297][ T8534] dump_stack_lvl+0x95/0xd0 [ 152.595403][ T8534] dump_stack+0x15/0x1b [ 152.595431][ T8534] should_fail_ex+0x259/0x270 [ 152.595528][ T8534] ? alloc_pipe_info+0xad/0x340 [ 152.595573][ T8534] should_failslab+0x8c/0xb0 [ 152.595668][ T8534] __kmalloc_cache_noprof+0x5d/0x3e0 [ 152.595713][ T8534] ? avc_has_perm_noaudit+0xac/0x160 [ 152.595746][ T8534] ? alloc_pipe_info+0xad/0x340 [ 152.595820][ T8534] alloc_pipe_info+0xad/0x340 [ 152.595865][ T8534] splice_direct_to_actor+0x58f/0x680 [ 152.595897][ T8534] ? __file_has_perm+0x3d9/0x430 [ 152.595924][ T8534] ? __pfx_direct_splice_actor+0x10/0x10 [ 152.596029][ T8534] do_splice_direct+0x119/0x1a0 [ 152.596058][ T8534] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 152.596130][ T8534] do_sendfile+0x37d/0x640 [ 152.596165][ T8534] __x64_sys_sendfile64+0x105/0x150 [ 152.596216][ T8534] x64_sys_call+0x1015/0x2550 [ 152.596243][ T8534] do_syscall_64+0x112/0x360 [ 152.596283][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.596315][ T8534] RIP: 0033:0x7fbd9860f559 [ 152.596394][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.596501][ T8534] RSP: 002b:00007fbd97067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.596529][ T8534] RAX: ffffffffffffffda RBX: 00007fbd98895fa0 RCX: 00007fbd9860f559 [ 152.596550][ T8534] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 152.596563][ T8534] RBP: 00007fbd986a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 152.596578][ T8534] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 152.596596][ T8534] R13: 00007fbd98896038 R14: 00007fbd98895fa0 R15: 00007ffc57485648 [ 152.596718][ T8534] [ 152.772710][ T29] audit: type=1400 audit(1793388198.689:1143): avc: denied { write } for pid=8536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.001682][ T8545] netlink: 'syz.5.1828': attribute type 1 has an invalid length. [ 153.130823][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.420316][ T8570] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 153.420342][ T8570] netlink: 59435 bytes leftover after parsing attributes in process `syz.2.1839'. [ 153.862731][ T8552] loop6: detected capacity change from 0 to 512 [ 154.067559][ T8576] loop5: detected capacity change from 0 to 8192 [ 154.081882][ T29] audit: type=1400 audit(1793388200.009:1144): avc: denied { mounton } for pid=8575 comm="syz.5.1841" path="/258/file1/file0" dev="loop5" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 154.081923][ T29] audit: type=1400 audit(1793388200.009:1145): avc: denied { mounton } for pid=8575 comm="syz.5.1841" path="/258/file1/file1" dev="loop5" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 154.259274][ T8583] loop5: detected capacity change from 0 to 1024 [ 154.289714][ T8583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.292423][ T29] audit: type=1400 audit(1793388200.219:1146): avc: denied { write } for pid=8582 comm="syz.5.1842" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.346032][ T29] audit: type=1400 audit(1793388200.269:1147): avc: denied { write } for pid=8582 comm="syz.5.1842" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.379134][ T8595] netlink: 'syz.0.1847': attribute type 4 has an invalid length. [ 154.546030][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.165925][ T8618] loop5: detected capacity change from 0 to 512 [ 155.991628][ T8641] loop6: detected capacity change from 0 to 512 [ 156.060665][ T8650] tipc: Enabling of bearer rejected, failed to enable media [ 156.192976][ T8641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.197876][ T8641] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.232204][ T8651] loop5: detected capacity change from 0 to 512 [ 156.247254][ T8651] EXT4-fs: Ignoring removed bh option [ 156.368094][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 156.368111][ T29] audit: type=1400 audit(1793388202.299:1192): avc: denied { write } for pid=8640 comm="syz.6.1867" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.368205][ T29] audit: type=1400 audit(1793388202.299:1193): avc: denied { write } for pid=8640 comm="syz.6.1867" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.368254][ T29] audit: type=1400 audit(1793388202.299:1194): avc: denied { rename } for pid=8640 comm="syz.6.1867" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.470778][ T8641] Quota error (device loop6): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 156.471156][ T8641] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 156.471478][ T8641] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.1867: Failed to acquire dquot type 0 [ 156.531228][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.566895][ T8651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.585858][ T8651] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.631794][ T29] audit: type=1400 audit(1793388202.549:1195): avc: denied { write } for pid=8649 comm="syz.5.1870" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.713076][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.868811][ T8702] FAULT_INJECTION: forcing a failure. [ 157.868811][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 157.868852][ T8702] CPU: 1 UID: 0 PID: 8702 Comm: syz.6.1892 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.868893][ T8702] Tainted: [W]=WARN [ 157.868903][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.868989][ T8702] Call Trace: [ 157.868996][ T8702] [ 157.869004][ T8702] __dump_stack+0x1d/0x30 [ 157.869030][ T8702] dump_stack_lvl+0x95/0xd0 [ 157.869053][ T8702] dump_stack+0x15/0x1b [ 157.869083][ T8702] should_fail_ex+0x259/0x270 [ 157.869143][ T8702] ? sctp_add_bind_addr+0x71/0x1e0 [ 157.869189][ T8702] should_failslab+0x8c/0xb0 [ 157.869235][ T8702] __kmalloc_cache_noprof+0x5d/0x3e0 [ 157.869297][ T8702] ? sctp_add_bind_addr+0x71/0x1e0 [ 157.869412][ T8702] sctp_add_bind_addr+0x71/0x1e0 [ 157.869496][ T8702] sctp_copy_local_addr_list+0x1b4/0x250 [ 157.869546][ T8702] sctp_copy_one_addr+0x7f/0x280 [ 157.869676][ T8702] sctp_bind_addr_copy+0x79/0x290 [ 157.869724][ T8702] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 157.869821][ T8702] sctp_connect_new_asoc+0x1c3/0x3a0 [ 157.869924][ T8702] sctp_sendmsg+0x105f/0x1d00 [ 157.869963][ T8702] ? __pfx_sctp_sendmsg+0x10/0x10 [ 157.869993][ T8702] ? __pfx_inet_sendmsg+0x10/0x10 [ 157.870034][ T8702] inet_sendmsg+0xc5/0xd0 [ 157.870123][ T8702] __sys_sendto+0x3c3/0x480 [ 157.870225][ T8702] __x64_sys_sendto+0x76/0x90 [ 157.870270][ T8702] x64_sys_call+0x200c/0x2550 [ 157.870307][ T8702] do_syscall_64+0x112/0x360 [ 157.870418][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.870448][ T8702] RIP: 0033:0x7f81f25bf559 [ 157.870469][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.870495][ T8702] RSP: 002b:00007f81f100f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.870588][ T8702] RAX: ffffffffffffffda RBX: 00007f81f2845fa0 RCX: 00007f81f25bf559 [ 157.870673][ T8702] RDX: 000000000000fffd RSI: 00002000000003c0 RDI: 0000000000000003 [ 157.870692][ T8702] RBP: 00007f81f2656b20 R08: 0000200000000400 R09: 000000000000001c [ 157.870710][ T8702] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000 [ 157.870725][ T8702] R13: 00007f81f2846038 R14: 00007f81f2845fa0 R15: 00007ffc9bbd1c88 [ 157.870750][ T8702] [ 157.909033][ T8704] loop5: detected capacity change from 0 to 512 [ 157.971426][ T8704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.972072][ T8704] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.002444][ T29] audit: type=1400 audit(1793388203.929:1196): avc: denied { write } for pid=8703 comm="syz.5.1891" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.002569][ T29] audit: type=1400 audit(1793388203.929:1197): avc: denied { write } for pid=8703 comm="syz.5.1891" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.009286][ T8704] Quota error (device loop5): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 158.009387][ T8704] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 158.009608][ T8704] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.1891: Failed to acquire dquot type 0 [ 158.094017][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.234453][ T8718] netlink: 'syz.6.1895': attribute type 1 has an invalid length. [ 158.250819][ T8718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.291072][ T8718] bond3: (slave veth3): Enslaving as an active interface with a down link [ 158.305878][ T8718] veth0_virt_wifi: entered promiscuous mode [ 158.313149][ T8718] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 158.316387][ T8718] bond3: (slave veth0_virt_wifi): Releasing active interface [ 159.193200][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 159.193225][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 159.194145][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 159.194164][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 159.635790][ T8776] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.813287][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 159.914581][ T8782] loop6: detected capacity change from 0 to 512 [ 159.931459][ T8782] EXT4-fs: Ignoring removed nobh option [ 160.055295][ T8782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.072368][ T8782] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.393623][ T8782] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #2: comm syz.6.1934: corrupted inode contents [ 160.398792][ T8782] EXT4-fs (loop6): Remounting filesystem read-only [ 160.450299][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.539741][ T8816] loop0: detected capacity change from 0 to 512 [ 160.693947][ T8816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.695516][ T8816] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.796687][ T8846] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.1936: Failed to acquire dquot type 0 [ 160.855592][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.972903][ T8839] loop6: detected capacity change from 0 to 512 [ 160.991756][ T8839] EXT4-fs: Ignoring removed bh option [ 161.103641][ T8839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.105841][ T8839] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.157055][ T8862] loop0: detected capacity change from 0 to 512 [ 161.168804][ T8862] EXT4-fs: Ignoring removed nobh option [ 161.210035][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.252774][ T8862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.257220][ T8862] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.310433][ T8862] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #2: comm syz.0.1949: corrupted inode contents [ 161.312100][ T8862] EXT4-fs (loop0): Remounting filesystem read-only [ 161.362590][ T8872] loop5: detected capacity change from 0 to 512 [ 161.444281][ T8880] xt_hashlimit: size too large, truncated to 1048576 [ 161.444299][ T8880] xt_hashlimit: max too large, truncated to 1048576 [ 161.444308][ T8880] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 161.494913][ T8801] Set syz0 is full, maxelem 65536 reached [ 161.511216][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.522199][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 162.522236][ T29] audit: type=1400 audit(1793388208.449:1317): avc: denied { map } for pid=8913 comm="syz.6.1967" path="/170/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.110642][ T29] audit: type=1326 audit(1793388209.039:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e08af559 code=0x7ffc0000 [ 163.111878][ T29] audit: type=1326 audit(1793388209.039:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f39e08af559 code=0x7ffc0000 [ 163.202978][ T29] audit: type=1326 audit(1793388209.129:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e08af559 code=0x7ffc0000 [ 163.203179][ T29] audit: type=1326 audit(1793388209.129:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e08af559 code=0x7ffc0000 [ 163.602236][ T29] audit: type=1326 audit(1793388209.469:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 163.602281][ T29] audit: type=1326 audit(1793388209.469:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 163.602443][ T29] audit: type=1326 audit(1793388209.529:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 163.602549][ T29] audit: type=1326 audit(1793388209.529:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 163.604562][ T29] audit: type=1326 audit(1793388209.529:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd47ebef559 code=0x7ffc0000 [ 163.680554][ T8936] loop0: detected capacity change from 0 to 512 [ 163.687200][ T8936] EXT4-fs: Ignoring removed bh option [ 163.797838][ T8936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.803937][ T8936] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.943631][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.079424][ T8962] lo: left promiscuous mode [ 164.079774][ T8962] tunl0: left promiscuous mode [ 164.080224][ T8962] gre0: left promiscuous mode [ 164.080888][ T8962] gretap0: left promiscuous mode [ 164.081480][ T8962] erspan0: left promiscuous mode [ 164.081919][ T8962] ip_vti0: left promiscuous mode [ 164.083058][ T8962] ip6_vti0: left promiscuous mode [ 164.083557][ T8962] sit0: left promiscuous mode [ 164.084032][ T8962] ip6tnl0: left promiscuous mode [ 164.086200][ T8962] ip6gre0: left promiscuous mode [ 164.086687][ T8962] ip6gretap0: left promiscuous mode [ 164.087295][ T8962] bridge0: left promiscuous mode [ 164.090682][ T8962] nlmon0: left promiscuous mode [ 164.092984][ T8962] batadv0: left promiscuous mode [ 164.093643][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.095359][ T8962] vxcan0: left promiscuous mode [ 164.097425][ T8962] vxcan1: left promiscuous mode [ 164.099897][ T8962] veth0: left promiscuous mode [ 164.101864][ T8962] veth1: left promiscuous mode [ 164.152755][ T8962] wg0: left promiscuous mode [ 164.165672][ T8962] wg1: left promiscuous mode [ 164.280429][ T8962] wg2: left promiscuous mode [ 164.281115][ T8962] veth0_to_bridge: left promiscuous mode [ 164.281703][ T8962] bridge_slave_0: left promiscuous mode [ 164.283213][ T8962] veth1_to_bridge: left promiscuous mode [ 164.283776][ T8962] bridge_slave_1: left promiscuous mode [ 164.284082][ T8962] veth0_to_bond: left promiscuous mode [ 164.284980][ T8962] bond_slave_0: left promiscuous mode [ 164.285324][ T8962] veth1_to_bond: left promiscuous mode [ 164.286404][ T8962] bond_slave_1: left promiscuous mode [ 164.286733][ T8962] veth1_to_team: left promiscuous mode [ 164.287307][ T8962] team_slave_1: left promiscuous mode [ 164.289077][ T8962] veth0_to_batadv: left promiscuous mode [ 164.289838][ T8962] batadv_slave_0: left promiscuous mode [ 164.292987][ T8962] veth1_to_batadv: left promiscuous mode [ 164.295916][ T8962] batadv_slave_1: left promiscuous mode [ 164.297249][ T8962] xfrm0: left promiscuous mode [ 164.298857][ T8962] veth0_to_hsr: left promiscuous mode [ 164.303572][ T8962] veth1_to_hsr: left promiscuous mode [ 164.305462][ T8962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.305579][ T8962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.305635][ T8962] hsr0: left promiscuous mode [ 164.312727][ T8962] veth1_virt_wifi: left promiscuous mode [ 164.315696][ T8962] veth0_virt_wifi: left promiscuous mode [ 164.316727][ T8962] veth1_vlan: left promiscuous mode [ 164.326473][ T8962] vlan1: left promiscuous mode [ 164.328142][ T8962] veth1_vlan: entered promiscuous mode [ 164.328348][ T8962] macvlan0: left promiscuous mode [ 164.336305][ T8962] macvlan1: left promiscuous mode [ 164.339239][ T8962] ipvlan0: left promiscuous mode [ 164.365106][ T8962] ipvlan1: left promiscuous mode [ 164.367863][ T8962] veth1_macvtap: left promiscuous mode [ 164.376854][ T8962] veth0_macvtap: left promiscuous mode [ 164.383592][ T8962] veth0_macvtap: entered promiscuous mode [ 164.383840][ T8962] macvtap0: left promiscuous mode [ 164.389482][ T8962] veth1_macvtap: entered promiscuous mode [ 164.389731][ T8962] macsec0: left promiscuous mode [ 164.394511][ T8962] geneve0: left promiscuous mode [ 164.410662][ T8962] geneve1: left promiscuous mode [ 164.417353][ T8962] veth2: left promiscuous mode [ 164.423661][ T8962] veth3: left promiscuous mode [ 164.431814][ T8962] gre1: left promiscuous mode [ 164.432566][ T8962] ip6erspan0: left promiscuous mode [ 164.442556][ T8962] dummy1: left promiscuous mode [ 164.447758][ T8962] bond1: left promiscuous mode [ 164.448228][ T8962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.455637][ T8962] ipvlan2: left promiscuous mode [ 164.455973][ T8962] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 164.470954][ T8962] gre2: left promiscuous mode [ 164.476744][ T8962] gtp0: left promiscuous mode [ 164.485046][ T8962] gretap1: left promiscuous mode [ 164.491342][ T8962] batman_adv: batadv0: Interface activated: gretap1 [ 164.492012][ T8962] bridge1: left promiscuous mode [ 164.515755][ T8962] gretap2: left promiscuous mode [ 164.559146][ T8962] 8021q: adding VLAN 0 to HW filter on device eth0 [ 164.573134][ T8962] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.598085][ T8962] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.599305][ T8962] 8021q: adding VLAN 0 to HW filter on device eth3 [ 165.168310][ T8994] ip_tables: iptables: counters copy to user failed while replacing table [ 165.185386][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1997'. [ 165.592446][ T8999] loop5: detected capacity change from 0 to 512 [ 165.714660][ T8999] EXT4-fs: Ignoring removed nobh option [ 165.863458][ T8999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.882842][ T8999] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.966458][ T8999] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #2: comm syz.5.1999: corrupted inode contents [ 165.966714][ T8999] EXT4-fs (loop5): Remounting filesystem read-only [ 166.247725][ T4710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.353808][ T9026] netlink: 'syz.6.2006': attribute type 1 has an invalid length. [ 166.353836][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2006'. [ 166.521659][ T9037] tipc: Started in network mode [ 166.521680][ T9037] tipc: Node identity 4, cluster identity 4711 [ 166.521693][ T9037] tipc: Node number set to 4 [ 166.855437][ T9016] loop0: detected capacity change from 0 to 512 [ 166.933465][ T9016] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.2002: corrupted in-inode xattr: invalid ea_ino [ 166.933596][ T9016] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.947733][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 166.947760][ C1] EXT4-fs (loop0): initial error at time 1793388212: ext4_iget_extra_inode:6027: inode 15 [ 166.947798][ C1] EXT4-fs (loop0): last error at time 1793388212: ext4_iget_extra_inode:6027: inode 15 [ 166.987412][ T9016] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2002: couldn't read orphan inode 15 (err -117) [ 166.987482][ T9016] loop0: lost filesystem error report for type 5 error -117 [ 167.006002][ T9016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.035120][ T9016] mmap: syz.0.2002 (9016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.147270][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.234887][ T9051] loop0: detected capacity change from 0 to 164 [ 167.243200][ T9051] rock: directory entry would overflow storage [ 167.243225][ T9051] rock: sig=0x66, size=4, remaining=3 [ 167.671680][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 167.671701][ T29] audit: type=1400 audit(1793388213.599:1414): avc: denied { create } for pid=9069 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.675343][ T29] audit: type=1400 audit(1793388213.599:1415): avc: denied { ioctl } for pid=9069 comm="syz.5.2021" path="socket:[26152]" dev="sockfs" ino=26152 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.704028][ T29] audit: type=1400 audit(1793388213.629:1416): avc: denied { bind } for pid=9069 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.336307][ T9101] syz.6.2033: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 168.336495][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.6.2033 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 168.336536][ T9101] Tainted: [W]=WARN [ 168.336546][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.336564][ T9101] Call Trace: [ 168.336573][ T9101] [ 168.336582][ T9101] __dump_stack+0x1d/0x30 [ 168.336643][ T9101] dump_stack_lvl+0x95/0xd0 [ 168.336674][ T9101] dump_stack+0x15/0x1b [ 168.336704][ T9101] warn_alloc+0x146/0x1c0 [ 168.336822][ T9101] __vmalloc_node_range_noprof+0xa3/0x10e0 [ 168.336859][ T9101] ? _raw_spin_unlock+0x9/0x30 [ 168.336904][ T9101] ? __hrtimer_rearm_deferred+0x571/0x650 [ 168.337033][ T9101] ? __pfx_futex_wake_mark+0x10/0x10 [ 168.337079][ T9101] ? __rcu_read_unlock+0x4e/0x70 [ 168.337114][ T9101] ? xskq_create+0x38/0x160 [ 168.337135][ T9101] ? should_failslab+0x8c/0xb0 [ 168.337275][ T9101] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 168.337379][ T9101] xskq_create+0xea/0x160 [ 168.337398][ T9101] ? xsk_init_queue+0x70/0xb0 [ 168.337500][ T9101] xsk_init_queue+0x70/0xb0 [ 168.337545][ T9101] xsk_setsockopt+0x471/0x640 [ 168.337611][ T9101] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.337656][ T9101] __sys_setsockopt+0x184/0x200 [ 168.337692][ T9101] __x64_sys_setsockopt+0x64/0x80 [ 168.337794][ T9101] x64_sys_call+0x248f/0x2550 [ 168.337827][ T9101] do_syscall_64+0x112/0x360 [ 168.337865][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.337895][ T9101] RIP: 0033:0x7f81f25bf559 [ 168.337916][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.337993][ T9101] RSP: 002b:00007f81f100f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.338028][ T9101] RAX: ffffffffffffffda RBX: 00007f81f2845fa0 RCX: 00007f81f25bf559 [ 168.338067][ T9101] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 168.338082][ T9101] RBP: 00007f81f2656b20 R08: 0000000000000004 R09: 0000000000000000 [ 168.338095][ T9101] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 168.338108][ T9101] R13: 00007f81f2846038 R14: 00007f81f2845fa0 R15: 00007ffc9bbd1c88 [ 168.338245][ T9101] [ 168.338521][ T9101] Mem-Info: [ 168.338530][ T9101] active_anon:100450 inactive_anon:5 isolated_anon:0 [ 168.338530][ T9101] active_file:1769 inactive_file:30958 isolated_file:0 [ 168.338530][ T9101] unevictable:0 dirty:193 writeback:0 [ 168.338530][ T9101] slab_reclaimable:3935 slab_unreclaimable:25744 [ 168.338530][ T9101] mapped:29555 shmem:88400 pagetables:5174 [ 168.338530][ T9101] sec_pagetables:0 bounce:0 [ 168.338530][ T9101] kernel_misc_reclaimable:0 [ 168.338530][ T9101] free:1759427 free_pcp:6665 free_cma:0 [ 168.338630][ T9101] Node 0 active_anon:401800kB inactive_anon:20kB active_file:7076kB inactive_file:123832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118220kB dirty:772kB writeback:0kB shmem:353600kB kernel_stack:4656kB pagetables:20696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.338722][ T9101] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.339004][ T9101] lowmem_reserve[]: 0 2877 7856 7856 [ 168.339221][ T9101] Node 0 DMA32 free:2942980kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946504kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 168.339708][ T9101] lowmem_reserve[]: 0 0 4978 4978 [ 168.339802][ T9101] Node 0 Normal free:4079368kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:401684kB inactive_anon:20kB active_file:7076kB inactive_file:123832kB unevictable:0kB writepending:772kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:23384kB local_pcp:20708kB free_cma:0kB [ 168.340100][ T9101] lowmem_reserve[]: 0 0 0 0 [ 168.340796][ T9101] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.342125][ T9101] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942980kB [ 168.346647][ T9101] Node 0 Normal: 31*4kB (UME) 38*8kB (UE) 19*16kB (UE) 1*32kB (E) 40*64kB (UM) 58*128kB (UME) 39*256kB (UM) 17*512kB (UME) 13*1024kB (UME) 5*2048kB (UME) 983*4096kB (UM) = 4079356kB [ 168.349882][ T9101] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 168.350071][ T9101] 121135 total pagecache pages [ 168.350296][ T9101] 0 pages in swap cache [ 168.350355][ T9101] Free swap = 124996kB [ 168.350423][ T9101] Total swap = 124996kB [ 168.350747][ T9101] 2097051 pages RAM [ 168.350807][ T9101] 0 pages HighMem/MovableOnly [ 168.350961][ T9101] 82032 pages reserved [ 168.892867][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2040'. [ 170.228414][ T9166] tipc: Cannot configure node identity twice [ 170.726105][ T29] audit: type=1326 audit(1793388216.649:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.5.2060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 170.726379][ T29] audit: type=1326 audit(1793388216.649:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.5.2060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 170.728223][ T29] audit: type=1326 audit(1793388216.649:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.5.2060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 170.874906][ T29] audit: type=1326 audit(1793388216.799:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.5.2060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 170.876291][ T29] audit: type=1326 audit(1793388216.799:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.5.2060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 171.134384][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2064'. [ 171.138259][ T9171] loop0: detected capacity change from 0 to 512 [ 171.262983][ T9171] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.263071][ T9171] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 171.507429][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 171.517535][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 171.711634][ T9212] loop6: detected capacity change from 0 to 512 [ 171.748448][ T9212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.748536][ T9212] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.796859][ T9217] lo: left promiscuous mode [ 171.797573][ T9217] tunl0: left promiscuous mode [ 171.823578][ T9217] gre0: left promiscuous mode [ 171.825171][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.851135][ T9217] erspan0: left promiscuous mode [ 171.865401][ T9217] ip_vti0: left promiscuous mode [ 171.866058][ T9217] ip6_vti0: left promiscuous mode [ 171.886041][ T9217] sit0: left promiscuous mode [ 171.894451][ T9217] ip6tnl0: left promiscuous mode [ 171.895572][ T9217] ip6gre0: left promiscuous mode [ 171.896453][ T9217] syz_tun: left promiscuous mode [ 171.897342][ T9217] ip6gretap0: left promiscuous mode [ 171.919841][ T9217] bridge0: left promiscuous mode [ 171.920728][ T9217] vcan0: left promiscuous mode [ 171.921431][ T9217] bond0: left promiscuous mode [ 171.922497][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.923191][ T9217] team0: left promiscuous mode [ 171.923596][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.924258][ T9217] dummy0: left promiscuous mode [ 171.925424][ T9217] nlmon0: left promiscuous mode [ 171.926011][ T9217] batadv0: left promiscuous mode [ 171.926836][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.927498][ T9217] veth0: left promiscuous mode [ 171.991403][ T9217] veth1: left promiscuous mode [ 172.319865][ T9229] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 172.484582][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2079'. [ 172.516697][ T9217] wg0: left promiscuous mode [ 172.526860][ T9217] wg1: left promiscuous mode [ 172.533859][ T9217] wg2: left promiscuous mode [ 172.534798][ T9217] veth0_to_bridge: left promiscuous mode [ 172.536511][ T9217] veth1_to_bridge: left promiscuous mode [ 172.554416][ T9217] veth0_to_bond: left promiscuous mode [ 172.555047][ T9217] bond_slave_0: left promiscuous mode [ 172.555734][ T9217] veth1_to_bond: left promiscuous mode [ 172.557631][ T9217] bond_slave_1: left promiscuous mode [ 172.582738][ T9217] veth1_to_team: left promiscuous mode [ 172.583351][ T9217] team_slave_1: left promiscuous mode [ 172.585424][ T9217] veth0_to_batadv: left promiscuous mode [ 172.586049][ T9217] batadv_slave_0: left promiscuous mode [ 172.586397][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.619879][ T9217] veth1_to_batadv: left promiscuous mode [ 172.620560][ T9217] batadv_slave_1: left promiscuous mode [ 172.620928][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.622622][ T9217] xfrm0: left promiscuous mode [ 172.625503][ T9217] veth0_to_hsr: left promiscuous mode [ 172.626507][ T9217] veth1_to_hsr: left promiscuous mode [ 172.640035][ T9217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.640158][ T9217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.640253][ T9217] hsr0: left promiscuous mode [ 172.650902][ T9217] veth1_virt_wifi: left promiscuous mode [ 172.652167][ T9217] veth0_virt_wifi: left promiscuous mode [ 172.663623][ T9217] vlan0: left promiscuous mode [ 172.666946][ T9217] vlan1: left promiscuous mode [ 172.674105][ T9217] macvlan1: left promiscuous mode [ 172.683545][ T9217] ipvlan0: left promiscuous mode [ 172.686696][ T9217] ipvlan1: left promiscuous mode [ 172.690398][ T9217] veth1_macvtap: left promiscuous mode [ 172.693139][ T9217] veth0_macvtap: left promiscuous mode [ 172.696087][ T9217] veth0_macvtap: entered promiscuous mode [ 172.696339][ T9217] macvtap0: left promiscuous mode [ 172.700031][ T9217] veth1_macvtap: entered promiscuous mode [ 172.700308][ T9217] macsec0: left promiscuous mode [ 172.703520][ T9217] geneve0: left promiscuous mode [ 172.711800][ T9217] geneve1: left promiscuous mode [ 172.772656][ T9217] vxlan0: left promiscuous mode [ 172.773800][ T9217] bond1: left promiscuous mode [ 172.776659][ T9217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.777345][ T9217] gretap1: left promiscuous mode [ 172.780525][ T9217] veth2: left promiscuous mode [ 172.782960][ T9217] veth3: left promiscuous mode [ 172.783505][ T9217] vlan2: left promiscuous mode [ 172.783548][ T9217] gretap0: left promiscuous mode [ 172.788661][ T9217] veth4: left promiscuous mode [ 172.789552][ T9217] veth5: left promiscuous mode [ 172.791859][ T9217] bond2: left promiscuous mode [ 172.792176][ T9217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.795238][ T9217] veth6: left promiscuous mode [ 172.797659][ T9217] veth7: left promiscuous mode [ 172.799977][ T9217] dvmrp6: left promiscuous mode [ 172.801815][ T9217] 0: left promiscuous mode [ 172.809466][ T9217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.872437][ T9217] 8021q: adding VLAN 0 to HW filter on device eth0 [ 172.873924][ T9217] 8021q: adding VLAN 0 to HW filter on device eth1 [ 172.875488][ T9217] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.877023][ T9217] 8021q: adding VLAN 0 to HW filter on device eth3 [ 172.909352][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.909396][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.911051][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.911091][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.021366][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.021401][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.021505][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.021687][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.021733][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.021759][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.021819][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.021854][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.044080][ T9232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 173.054188][ T9232] bond8: (slave bond9): making interface the new active one [ 173.070912][ T9232] bond8: (slave bond9): Enslaving as an active interface with an up link [ 173.088469][ T5858] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 173.088838][ T5858] bond4: (slave macvlan0): link status definitely up, 10000 Mbps full duplex [ 173.090643][ T5858] bond4: (slave veth9): making interface the new active one [ 173.091927][ T5858] bond4: active interface up! [ 173.122140][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 173.160393][ T9233] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 173.162530][ T9237] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.164576][ T9239] lo: left promiscuous mode [ 173.164814][ T9239] tunl0: left promiscuous mode [ 173.165030][ T9239] gre0: left promiscuous mode [ 173.165280][ T9239] gretap0: left promiscuous mode [ 173.165440][ T9239] erspan0: left promiscuous mode [ 173.165723][ T9239] ip_vti0: left promiscuous mode [ 173.165944][ T9239] ip6_vti0: left promiscuous mode [ 173.173093][ T9239] sit0: left promiscuous mode [ 173.173352][ T9239] ip6tnl0: left promiscuous mode [ 173.173532][ T9239] ip6gre0: left promiscuous mode [ 173.173817][ T9239] syz_tun: left promiscuous mode [ 173.173974][ T9239] ip6gretap0: left promiscuous mode [ 173.183358][ T9239] bridge0: left promiscuous mode [ 173.183663][ T9239] vcan0: left promiscuous mode [ 173.183874][ T9239] bond0: left promiscuous mode [ 173.184082][ T9239] team0: left promiscuous mode [ 173.184375][ T9239] dummy0: left promiscuous mode [ 173.184639][ T9239] nlmon0: left promiscuous mode [ 173.192644][ T9239] batadv0: left promiscuous mode [ 173.192844][ T9239] veth0: left promiscuous mode [ 173.193000][ T9239] veth1: left promiscuous mode [ 173.193227][ T9239] wg0: left promiscuous mode [ 173.193392][ T9239] wg1: left promiscuous mode [ 173.193538][ T9239] wg2: left promiscuous mode [ 173.193704][ T9239] veth0_to_bridge: left promiscuous mode [ 173.201175][ T9239] bridge_slave_0: left promiscuous mode [ 173.201388][ T9239] veth1_to_bridge: left promiscuous mode [ 173.201546][ T9239] bridge_slave_1: left promiscuous mode [ 173.201740][ T9239] veth0_to_bond: left promiscuous mode [ 173.201907][ T9239] bond_slave_0: left promiscuous mode [ 173.202102][ T9239] veth1_to_bond: left promiscuous mode [ 173.202301][ T9239] bond_slave_1: left promiscuous mode [ 173.202446][ T9239] veth0_to_team: left promiscuous mode [ 173.209739][ T9239] team_slave_0: left promiscuous mode [ 173.209990][ T9239] veth1_to_team: left promiscuous mode [ 173.210164][ T9239] team_slave_1: left promiscuous mode [ 173.210307][ T9239] veth0_to_batadv: left promiscuous mode [ 173.210483][ T9239] batadv_slave_0: left promiscuous mode [ 173.210612][ T9239] xfrm0: left promiscuous mode [ 173.210740][ T9239] veth0_to_hsr: left promiscuous mode [ 173.210837][ T9239] veth1_to_hsr: left promiscuous mode [ 173.215534][ T9239] hsr0: left promiscuous mode [ 173.215763][ T9239] veth1_virt_wifi: left promiscuous mode [ 173.215925][ T9239] veth0_virt_wifi: left promiscuous mode [ 173.216487][ T9239] vlan0: left promiscuous mode [ 173.226045][ T9239] vlan1: left promiscuous mode [ 173.226468][ T9239] macvlan0: left promiscuous mode [ 173.226632][ T9239] macvlan1: left promiscuous mode [ 173.226879][ T9239] ipvlan0: left promiscuous mode [ 173.227036][ T9239] ipvlan1: left promiscuous mode [ 173.235862][ T9239] macvtap0: left promiscuous mode [ 173.235977][ T9239] macsec0: left promiscuous mode [ 173.236142][ T9239] geneve0: left promiscuous mode [ 173.236298][ T9239] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 173.236370][ T9239] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 173.236521][ T9239] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 173.236586][ T9239] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 173.236665][ T9239] batadv1: left promiscuous mode [ 173.236785][ T9239] : left promiscuous mode [ 173.236847][ T9239] ip6tnl1: left promiscuous mode [ 173.368566][ T5860] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.369929][ T5860] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.370155][ T5860] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.370268][ T5860] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.423881][ T5862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.563688][ T5862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.642465][ T29] audit: type=1400 audit(1793388219.559:1422): avc: denied { append } for pid=9251 comm="syz.0.2086" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.706915][ T5862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.789968][ T5862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.996025][ T5862] bridge_slave_1: left allmulticast mode [ 173.996054][ T5862] bridge_slave_1: left promiscuous mode [ 173.996184][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.036494][ T5862] bridge_slave_0: left allmulticast mode [ 174.036522][ T5862] bridge_slave_0: left promiscuous mode [ 174.036701][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.068282][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 174.235800][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.250242][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.251449][ T5862] bond0 (unregistering): Released all slaves [ 174.392770][ T5862] hsr_slave_0: left promiscuous mode [ 174.395247][ T5862] hsr_slave_1: left promiscuous mode [ 174.395955][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.395978][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.397598][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.397617][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.444435][ T5862] veth1_macvtap: left promiscuous mode [ 174.444469][ T5862] veth0_macvtap: left promiscuous mode [ 174.444524][ T5862] veth1_vlan: left promiscuous mode [ 174.444626][ T5862] veth0_vlan: left promiscuous mode [ 174.587252][ T29] audit: type=1400 audit(1793388220.509:1423): avc: denied { write } for pid=9293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.657465][ T29] audit: type=1400 audit(1793388220.579:1424): avc: denied { write } for pid=9313 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.786985][ T5862] team0 (unregistering): Port device team_slave_1 removed [ 174.799283][ T5862] team0 (unregistering): Port device team_slave_0 removed [ 174.913875][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.144781][ T29] audit: type=1400 audit(1793388221.069:1425): avc: denied { write } for pid=9335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.251515][ T29] audit: type=1400 audit(1793388221.179:1426): avc: denied { write } for pid=9352 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.315199][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.535484][ T29] audit: type=1400 audit(1793388221.459:1427): avc: denied { write } for pid=9359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.585523][ T29] audit: type=1400 audit(1793388221.509:1428): avc: denied { write } for pid=9373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.630856][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.671403][ T9377] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 175.725340][ T9377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.728648][ T9377] bond2: (slave bond3): making interface the new active one [ 175.745661][ T9377] bond2: (slave bond3): Enslaving as an active interface with an up link [ 175.772402][ T9377] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 175.800231][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2116'. [ 175.801041][ T9377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.024335][ T29] audit: type=1400 audit(1793388221.949:1429): avc: denied { write } for pid=9383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.081980][ T29] audit: type=1400 audit(1793388222.009:1430): avc: denied { write } for pid=9400 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.160444][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.175441][ T9409] FAULT_INJECTION: forcing a failure. [ 176.175441][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 176.175555][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.6.2123 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.175663][ T9409] Tainted: [W]=WARN [ 176.175673][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.175690][ T9409] Call Trace: [ 176.175699][ T9409] [ 176.175709][ T9409] __dump_stack+0x1d/0x30 [ 176.175822][ T9409] dump_stack_lvl+0x95/0xd0 [ 176.175851][ T9409] dump_stack+0x15/0x1b [ 176.175922][ T9409] should_fail_ex+0x259/0x270 [ 176.175951][ T9409] ? sget_fc+0x991/0xfa0 [ 176.175987][ T9409] should_failslab+0x8c/0xb0 [ 176.176038][ T9409] __kmalloc_cache_noprof+0x5d/0x3e0 [ 176.176074][ T9409] ? sget_fc+0x991/0xfa0 [ 176.176153][ T9409] ? __list_lru_init+0x2f3/0x320 [ 176.176242][ T9409] sget_fc+0x991/0xfa0 [ 176.176271][ T9409] ? __pfx_set_anon_super_fc+0x10/0x10 [ 176.176307][ T9409] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 176.176350][ T9409] ? mqueue_init_fs_context+0x38/0x2c0 [ 176.176402][ T9409] ? __pfx_mqueue_fill_super+0x10/0x10 [ 176.176484][ T9409] get_tree_nodev+0x2a/0x100 [ 176.176524][ T9409] mqueue_get_tree+0x5d/0x80 [ 176.176553][ T9409] vfs_get_tree+0x57/0x1d0 [ 176.176599][ T9409] fc_mount_longterm+0x18/0xb0 [ 176.176674][ T9409] mq_init_ns+0x2db/0x370 [ 176.176744][ T9409] copy_ipcs+0x26d/0x460 [ 176.176772][ T9409] create_new_namespaces+0x121/0x420 [ 176.176797][ T9409] unshare_nsproxy_namespaces+0x115/0x150 [ 176.176884][ T9409] ksys_unshare+0x3a3/0x690 [ 176.176923][ T9409] __x64_sys_unshare+0x1f/0x30 [ 176.176993][ T9409] x64_sys_call+0x1e33/0x2550 [ 176.177029][ T9409] do_syscall_64+0x112/0x360 [ 176.177117][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.177147][ T9409] RIP: 0033:0x7f81f25bf559 [ 176.177165][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.177187][ T9409] RSP: 002b:00007f81f100f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 176.177208][ T9409] RAX: ffffffffffffffda RBX: 00007f81f2845fa0 RCX: 00007f81f25bf559 [ 176.177234][ T9409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 176.177253][ T9409] RBP: 00007f81f2656b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.177271][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.177289][ T9409] R13: 00007f81f2846038 R14: 00007f81f2845fa0 R15: 00007ffc9bbd1c88 [ 176.177317][ T9409] [ 176.460608][ T9406] tipc: Enabled bearer , priority 0 [ 176.461295][ T9410] tipc: Disabling bearer [ 176.493047][ T7150] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.822635][ T29] audit: type=1400 audit(1793388222.749:1431): avc: denied { name_bind } for pid=9436 comm="syz.6.2132" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 176.957003][ T9452] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2138'. [ 176.967541][ T9452] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2138'. [ 176.968151][ T9452] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2138'. [ 178.067849][ T9490] loop6: detected capacity change from 0 to 512 [ 178.115130][ T9490] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.2150: corrupted in-inode xattr: invalid ea_ino [ 178.115333][ T9490] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.117272][ T9490] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2150: couldn't read orphan inode 15 (err -117) [ 178.117393][ T9490] loop6: lost filesystem error report for type 5 error -117 [ 178.118014][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 178.118314][ C0] EXT4-fs (loop6): initial error at time 1793388224: ext4_iget_extra_inode:6027: inode 15 [ 178.118727][ C0] EXT4-fs (loop6): last error at time 1793388224: ext4_iget_extra_inode:6027: inode 15 [ 178.211230][ T9490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.351959][ T9499] tipc: Started in network mode [ 178.354854][ T9499] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 178.361801][ T9499] tipc: Enabled bearer , priority 0 [ 178.369112][ T9499] tipc: Disabling bearer [ 178.435071][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.583102][ T3413] kernel read not supported for file inotify (pid: 3413 comm: kworker/1:7) [ 178.889039][ T9531] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.122085][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.126090][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.520387][ T9549] tipc: Enabled bearer , priority 0 [ 179.521080][ T9549] tipc: Disabling bearer [ 179.577989][ T29] audit: type=1400 audit(1793388225.499:1432): avc: denied { getopt } for pid=9550 comm="syz.6.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.640968][ T29] audit: type=1400 audit(1793388225.559:1433): avc: denied { name_bind } for pid=9550 comm="syz.6.2172" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 180.392902][ T29] audit: type=1326 audit(1793388226.319:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.1.2175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f880540f559 code=0x0 [ 180.641555][ T9573] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.2182'. [ 180.689012][ T9575] loop6: detected capacity change from 0 to 1024 [ 180.699975][ T9575] EXT4-fs: Ignoring removed nobh option [ 180.700108][ T9575] EXT4-fs: Ignoring removed bh option [ 180.730811][ T9575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.981474][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.003718][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 181.005092][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.036083][ T9591] bridge_slave_0 (unregistering): left allmulticast mode [ 181.036114][ T9591] bridge_slave_0 (unregistering): left promiscuous mode [ 181.036224][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.514131][ T29] audit: type=1400 audit(1793388227.439:1435): avc: denied { connect } for pid=9603 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.527624][ T9607] tipc: Enabling of bearer rejected, failed to enable media [ 182.357434][ T9601] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.365091][ T9626] loop0: detected capacity change from 0 to 512 [ 182.380325][ T9626] tipc: Enabling of bearer rejected, failed to enable media [ 182.682192][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2200'. [ 182.822366][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.824123][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.829657][ T9643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.954052][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.957391][ T9643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.957417][ T9643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.959066][ T9643] veth0_virt_wifi: left promiscuous mode [ 183.002445][ T9643] veth1_macvtap: left promiscuous mode [ 183.003150][ T9643] veth0_macvtap: left promiscuous mode [ 183.003656][ T9643] veth0_macvtap: entered promiscuous mode [ 183.004291][ T9643] veth1_macvtap: entered promiscuous mode [ 183.006991][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.007800][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.010922][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.013533][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.017614][ T9643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.046883][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.046931][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.048137][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.048169][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.117222][ T9639] tipc: Enabled bearer , priority 0 [ 183.138152][ T5858] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 183.138219][ T5858] bond3: (slave veth3): making interface the new active one [ 183.139025][ T5858] bond3: active interface up! [ 183.173187][ T9647] tipc: Disabling bearer [ 183.674720][ T9671] loop6: detected capacity change from 0 to 1024 [ 183.688059][ T9671] EXT4-fs: Ignoring removed bh option [ 183.718782][ T9671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.720162][ T9671] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.740340][ T29] audit: type=1400 audit(1793388229.659:1436): avc: denied { write } for pid=9670 comm="syz.6.2214" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.934924][ T5858] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 183.935230][ T5858] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 183.935254][ T5858] EXT4-fs (loop6): This should not happen!! Data will be lost [ 183.935254][ T5858] [ 183.989541][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.018645][ T9687] netlink: 'syz.6.2218': attribute type 1 has an invalid length. [ 184.036485][ T9687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.057584][ T9687] gretap1: entered promiscuous mode [ 184.064153][ T9687] bond4: (slave gretap1): making interface the new active one [ 184.066138][ T9687] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 184.136323][ T9693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.590643][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2243'. [ 184.595895][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 184.595945][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 184.595962][ T9721] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2233'. [ 184.601232][ T9715] loop6: detected capacity change from 0 to 512 [ 184.602293][ T9723] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2243'. [ 184.607312][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2243'. [ 184.642458][ T9715] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.2230: invalid indirect mapped block 256 (level 2) [ 184.642563][ T9715] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.643696][ T9715] EXT4-fs (loop6): 2 truncates cleaned up [ 184.644430][ T9715] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.753449][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 184.782950][ T9729] loop6: detected capacity change from 0 to 256 [ 184.932068][ T29] audit: type=1400 audit(1793388230.859:1437): avc: denied { remount } for pid=9730 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.112171][ T29] audit: type=1400 audit(1793388231.039:1438): avc: denied { create } for pid=9741 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.117538][ T9744] tunl0: left promiscuous mode [ 185.117641][ T9744] gre0: left promiscuous mode [ 185.117709][ T9744] gretap0: left promiscuous mode [ 185.117816][ T9744] erspan0: left promiscuous mode [ 185.158180][ T9744] ip_vti0: left promiscuous mode [ 185.158264][ T9744] ip6_vti0: left promiscuous mode [ 185.158336][ T9744] sit0: left promiscuous mode [ 185.158478][ T9744] ip6tnl0: left promiscuous mode [ 185.158530][ T9744] ip6gre0: left promiscuous mode [ 185.158768][ T9744] syz_tun: left promiscuous mode [ 185.158906][ T9744] ip6gretap0: left promiscuous mode [ 185.159034][ T9744] bridge0: left promiscuous mode [ 185.159141][ T9744] vcan0: left promiscuous mode [ 185.159198][ T9744] bond0: left promiscuous mode [ 185.159365][ T9744] nlmon0: left promiscuous mode [ 185.159492][ T9744] batadv0: left promiscuous mode [ 185.159552][ T9744] vxcan0: left promiscuous mode [ 185.159612][ T9744] vxcan1: left promiscuous mode [ 185.159740][ T9744] veth0: left promiscuous mode [ 185.159798][ T9744] veth1: left promiscuous mode [ 185.160010][ T9744] wg0: left promiscuous mode [ 185.160061][ T9744] wg1: left promiscuous mode [ 185.160209][ T9744] wg2: left promiscuous mode [ 185.160387][ T9744] veth0_to_bridge: left promiscuous mode [ 185.160452][ T9744] bridge_slave_0: left promiscuous mode [ 185.160501][ T9744] veth1_to_bridge: left promiscuous mode [ 185.160593][ T9744] bridge_slave_1: left promiscuous mode [ 185.160675][ T9744] veth0_to_bond: left promiscuous mode [ 185.160781][ T9744] bond_slave_0: left promiscuous mode [ 185.160845][ T9744] veth1_to_bond: left promiscuous mode [ 185.160931][ T9744] bond_slave_1: left promiscuous mode [ 185.161033][ T9744] veth0_to_team: left promiscuous mode [ 185.161090][ T9744] team_slave_0: left promiscuous mode [ 185.161149][ T9744] veth1_to_team: left promiscuous mode [ 185.161237][ T9744] team_slave_1: left promiscuous mode [ 185.161295][ T9744] veth0_to_batadv: left promiscuous mode [ 185.161436][ T9744] batadv_slave_0: left promiscuous mode [ 185.161497][ T9744] veth1_to_batadv: left promiscuous mode [ 185.161577][ T9744] batadv_slave_1: left promiscuous mode [ 185.161638][ T9744] xfrm0: left promiscuous mode [ 185.161703][ T9744] veth0_to_hsr: left promiscuous mode [ 185.161877][ T9744] veth1_to_hsr: left promiscuous mode [ 185.162076][ T9744] hsr0: left promiscuous mode [ 185.162173][ T9744] veth1_virt_wifi: left promiscuous mode [ 185.162279][ T9744] veth0_virt_wifi: left promiscuous mode [ 185.162545][ T9744] vlan0: left promiscuous mode [ 185.162632][ T9744] vlan1: left promiscuous mode [ 185.162756][ T9744] macvlan0: left promiscuous mode [ 185.162851][ T9744] macvlan1: left promiscuous mode [ 185.162969][ T9744] ipvlan0: left promiscuous mode [ 185.163045][ T9744] ipvlan1: left promiscuous mode [ 185.163345][ T9744] macvtap0: left promiscuous mode [ 185.163455][ T9744] macsec0: left promiscuous mode [ 185.163597][ T9744] geneve0: left promiscuous mode [ 185.163660][ T9744] geneve1: left promiscuous mode [ 185.163773][ T9744] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 185.163875][ T9744] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 185.163942][ T9744] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 185.164074][ T9744] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 185.164147][ T9744] bridge1: left promiscuous mode [ 185.164294][ T9744] veth2: left promiscuous mode [ 185.164476][ T9744] veth3: left promiscuous mode [ 185.164533][ T9744] veth4: left promiscuous mode [ 185.164718][ T9744] veth5: left promiscuous mode [ 185.164825][ T9744] gtp0: left promiscuous mode [ 185.164863][ T9744] gtp0: left allmulticast mode [ 185.165435][ T9744] veth9: left allmulticast mode [ 185.165799][ T9744] gretap1: left promiscuous mode [ 185.166255][ T9744] bond6: left promiscuous mode [ 185.166273][ T9744] bridge2: left promiscuous mode [ 185.166693][ T9744] vlan4: left allmulticast mode [ 185.166712][ T9744] bond6: left allmulticast mode [ 185.166735][ T9744] bridge2: left allmulticast mode [ 185.200699][ T9749] netlink: 'syz.5.2242': attribute type 4 has an invalid length. [ 185.202000][ T9749] netlink: 'syz.5.2242': attribute type 4 has an invalid length. [ 185.424589][ T29] audit: type=1400 audit(1793388231.349:1439): avc: denied { watch } for pid=9752 comm="syz.5.2246" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 185.666398][ T29] audit: type=1400 audit(1793388231.539:1440): avc: denied { getopt } for pid=9757 comm="syz.6.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.275130][ T9780] loop0: detected capacity change from 0 to 512 [ 186.385236][ T9758] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.398395][ T9780] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2256: bad orphan inode 15 [ 186.398495][ T9780] loop0: lost filesystem error report for type 5 error -117 [ 186.403376][ T9780] ext4_test_bit(bit=14, block=5) = 0 [ 186.410507][ T9780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.418927][ T9780] EXT4-fs error (device loop0): __ext4_new_inode:1083: comm syz.0.2256: reserved inode found cleared - inode=1 [ 186.419344][ T29] audit: type=1400 audit(1793388232.349:1441): avc: denied { write } for pid=9779 comm="syz.0.2256" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.532943][ T29] audit: type=1400 audit(1793388232.459:1442): avc: denied { write } for pid=9783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.580127][ T29] audit: type=1400 audit(1793388232.509:1443): avc: denied { write } for pid=9797 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.633190][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.060586][ T29] audit: type=1400 audit(1793388232.979:1444): avc: denied { ioctl } for pid=9816 comm="syz.5.2263" path="socket:[29436]" dev="sockfs" ino=29436 ioctlcmd=0x894a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.109093][ T9819] netlink: 'syz.5.2263': attribute type 2 has an invalid length. [ 187.109116][ T9819] netlink: 'syz.5.2263': attribute type 2 has an invalid length. [ 187.109133][ T9819] netlink: 'syz.5.2263': attribute type 2 has an invalid length. [ 187.109147][ T9819] netlink: 'syz.5.2263': attribute type 1 has an invalid length. [ 187.286454][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.295530][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.319265][ T9815] bridge_slave_1: entered promiscuous mode [ 187.335309][ T9815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.335339][ T9815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.337225][ T9815] veth1_vlan: left promiscuous mode [ 187.337791][ T9815] veth0_vlan: left promiscuous mode [ 187.371381][ T9815] veth0_vlan: entered promiscuous mode [ 187.372411][ T9815] veth1_vlan: entered promiscuous mode [ 187.375409][ T9815] veth1_macvtap: left promiscuous mode [ 187.376104][ T9815] veth0_macvtap: left promiscuous mode [ 187.376731][ T9815] veth0_macvtap: entered promiscuous mode [ 187.377334][ T9815] veth1_macvtap: entered promiscuous mode [ 187.421922][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.423112][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.427120][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.432124][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.463807][ T9815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.477403][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.504329][ T9815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.534026][ T9815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.546824][ T9815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.559922][ T9815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.563452][ T9815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.583194][ T9815] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.588735][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 187.605776][ T9815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.606686][ T9815] 8021q: adding VLAN 0 to HW filter on device bond9 [ 187.618359][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.618483][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.618606][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.618736][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.785299][ T38] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.785398][ T38] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.811198][ T7144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.857801][ T9832] loop0: detected capacity change from 0 to 256 [ 187.880873][ T9832] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.000373][ T29] audit: type=1400 audit(1793388233.929:1445): avc: denied { write } for pid=9820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.116355][ T29] audit: type=1400 audit(1793388234.039:1446): avc: denied { write } for pid=9846 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.508478][ T3413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.828418][ T3413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.137109][ T9894] SELinux: Context OPcǙ?s U^tQ`w& m [ 189.137109][ T9894] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 189.167995][ T9886] loop0: detected capacity change from 0 to 1024 [ 189.172545][ T9886] EXT4-fs: Ignoring removed i_version option [ 189.173617][ T9886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.173969][ T9886] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.187230][ T9886] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 189.187679][ T9886] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.187913][ T9886] EXT4-fs error (device loop0): ext4_free_blocks:6717: comm syz.0.2272: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.187997][ T9886] loop0: lost filesystem error report for type 5 error -117 [ 189.188204][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 189.188254][ C1] EXT4-fs (loop0): initial error at time 1793388235: ext4_free_blocks:6717 [ 189.188327][ C1] EXT4-fs (loop0): last error at time 1793388235: ext4_free_blocks:6717 [ 189.189295][ T9886] EXT4-fs (loop0): Remounting filesystem read-only [ 189.189386][ T9886] EXT4-fs (loop0): 1 orphan inode deleted [ 189.190924][ T9886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.303425][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.554701][ T9960] loop0: detected capacity change from 0 to 512 [ 190.555079][ T9960] ext4: Unknown parameter 'fowner>00000000000000000000' [ 190.944639][ T9972] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2306'. [ 191.140548][ T9979] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.909767][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 191.909787][ T29] audit: type=1326 audit(1793388237.839:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.909821][ T29] audit: type=1326 audit(1793388237.839:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.909848][ T29] audit: type=1326 audit(1793388237.839:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.909959][ T29] audit: type=1326 audit(1793388237.839:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.909988][ T29] audit: type=1326 audit(1793388237.839:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.916587][ T29] audit: type=1326 audit(1793388237.839:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9860f559 code=0x7ffc0000 [ 191.978431][ T29] audit: type=1326 audit(1793388237.909:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd985cfd8e code=0x7ffc0000 [ 191.982338][ T29] audit: type=1326 audit(1793388237.909:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd985cfd8e code=0x7ffc0000 [ 191.986634][ T29] audit: type=1326 audit(1793388237.909:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd985cfd8e code=0x7ffc0000 [ 191.993182][ T29] audit: type=1326 audit(1793388237.919:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.5.2317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd985cfd8e code=0x7ffc0000 [ 192.108236][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.387755][T10033] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 192.671244][T10030] loop0: detected capacity change from 0 to 1024 [ 192.678753][T10046] loop6: detected capacity change from 0 to 512 [ 192.693780][T10046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2331: bg 0: block 385: padding at end of block bitmap is not set [ 192.693812][T10046] loop6: lost filesystem error report for type 5 error -117 [ 192.694384][T10046] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 192.694409][T10046] loop6: lost filesystem error report for type 5 error -117 [ 192.697884][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 192.697906][ C1] EXT4-fs (loop6): initial error at time 1793388238: ext4_validate_block_bitmap:445 [ 192.698019][ C1] EXT4-fs (loop6): last error at time 1793388238: ext4_mb_clear_bb:6678 [ 192.698354][T10046] EXT4-fs (loop6): 2 truncates cleaned up [ 192.699478][T10046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.736513][T10030] EXT4-fs: Ignoring removed bh option [ 192.770706][T10030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.770885][T10030] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.831395][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.888179][ T38] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.890186][ T38] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 192.890222][ T38] EXT4-fs (loop0): This should not happen!! Data will be lost [ 192.890222][ T38] [ 192.891062][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.998355][T10067] loop0: detected capacity change from 0 to 128 [ 193.041984][T10067] bio_check_eod: 70 callbacks suppressed [ 193.042051][T10067] syz.0.2338: attempt to access beyond end of device [ 193.042051][T10067] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 193.069186][T10067] syz.0.2338: attempt to access beyond end of device [ 193.069186][T10067] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 193.069327][T10067] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 193.069695][T10067] syz.0.2338: attempt to access beyond end of device [ 193.069695][T10067] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 193.069914][T10067] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 193.071011][T10067] syz.0.2338: attempt to access beyond end of device [ 193.071011][T10067] loop0: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 193.076044][T10067] syz.0.2338: attempt to access beyond end of device [ 193.076044][T10067] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 193.130042][T10067] syz.0.2338: attempt to access beyond end of device [ 193.130042][T10067] loop0: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 193.130132][T10067] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 193.130192][T10067] syz.0.2338: attempt to access beyond end of device [ 193.130192][T10067] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 193.130336][T10067] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 193.140347][T10067] syz.0.2338: attempt to access beyond end of device [ 193.140347][T10067] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 193.143134][T10067] syz.0.2338: attempt to access beyond end of device [ 193.143134][T10067] loop0: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 193.143218][T10067] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 193.143383][T10067] syz.0.2338: attempt to access beyond end of device [ 193.143383][T10067] loop0: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 193.143454][T10067] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 193.153097][T10067] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 193.153189][T10067] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 193.181576][T10067] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 193.181680][T10067] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 193.761271][ T368] batman_adv: batadv0: Removing interface: gretap1 [ 193.766328][ T368] bond1 (unregistering): (slave gretap2): Releasing active interface [ 193.810728][ T368] bond0 (unregistering): Released all slaves [ 193.813072][ T368] bond1 (unregistering): Released all slaves [ 193.917710][ T368] tipc: Left network mode [ 194.040678][T10086] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.437045][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 194.735033][T10126] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.199585][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 195.490911][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 195.874476][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 196.077962][T10185] loop0: detected capacity change from 0 to 512 [ 196.080534][T10185] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 196.080626][T10185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.104149][T10185] EXT4-fs (loop0): 1 truncate cleaned up [ 196.105454][T10185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.426838][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.807097][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2376'. [ 196.861280][T10250] netlink: 'syz.0.2378': attribute type 83 has an invalid length. [ 197.790084][T10284] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 197.854596][T10293] process 'syz.5.2393' launched './file0' with NULL argv: empty string added [ 197.855089][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 197.855103][ T29] audit: type=1400 audit(1793388243.779:1551): avc: denied { execute_no_trans } for pid=10292 comm="syz.5.2393" path="/file0" dev="ramfs" ino=31358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 198.095137][T10307] loop0: detected capacity change from 0 to 256 [ 198.095613][T10307] vfat: Unknown parameter 'uni_xrrors' [ 198.256439][T10277] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.525086][T10328] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.666070][T10339] FAULT_INJECTION: forcing a failure. [ 198.666070][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 198.666166][T10339] CPU: 0 UID: 0 PID: 10339 Comm: syz.6.2410 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 198.666198][T10339] Tainted: [W]=WARN [ 198.666205][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.666220][T10339] Call Trace: [ 198.666229][T10339] [ 198.666239][T10339] __dump_stack+0x1d/0x30 [ 198.666338][T10339] dump_stack_lvl+0x95/0xd0 [ 198.666369][T10339] dump_stack+0x15/0x1b [ 198.666391][T10339] should_fail_ex+0x259/0x270 [ 198.666429][T10339] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 198.666486][T10339] should_failslab+0x8c/0xb0 [ 198.666518][T10339] __kmalloc_cache_noprof+0x5d/0x3e0 [ 198.666558][T10339] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 198.666635][T10339] __io_uring_add_tctx_node+0xea/0x3c0 [ 198.666711][T10339] io_uring_create+0x3e1/0x4f0 [ 198.666754][T10339] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 198.666901][T10339] __x64_sys_io_uring_setup+0x31/0x40 [ 198.666950][T10339] x64_sys_call+0x1fbf/0x2550 [ 198.666977][T10339] do_syscall_64+0x112/0x360 [ 198.667064][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.667091][T10339] RIP: 0033:0x7f81f25bf559 [ 198.667113][T10339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.667136][T10339] RSP: 002b:00007f81f100efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 198.667159][T10339] RAX: ffffffffffffffda RBX: 0000200000002240 RCX: 00007f81f25bf559 [ 198.667180][T10339] RDX: 0000000000000000 RSI: 0000200000002240 RDI: 0000000000003f6f [ 198.667259][T10339] RBP: 00007f81f2656b20 R08: 0000000000000000 R09: 0000000000000000 [ 198.667276][T10339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.667330][T10339] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc9bbd1c88 [ 198.667385][T10339] [ 198.946547][ T29] audit: type=1400 audit(1793388244.869:1552): avc: denied { create } for pid=10325 comm="syz.2.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 199.304352][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 199.481038][T10369] ./dev/sda1: Can't lookup blockdev [ 199.822987][T10367] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.209055][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 200.691978][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 201.468815][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.517575][T10441] loop0: detected capacity change from 0 to 1024 [ 201.590140][T10441] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 201.590968][T10441] EXT4-fs (loop0): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 201.611004][T10441] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 201.611282][T10441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.612212][T10441] EXT4-fs error (device loop0): ext4_read_inode_bitmap:169: comm syz.0.2439: Inode bitmap for bg 0 marked uninitialized [ 201.612236][T10441] loop0: lost filesystem error report for type 5 error -117 [ 201.614703][T10441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.735403][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.843128][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'. [ 201.843845][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 202.102168][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 202.216293][ T29] audit: type=1400 audit(1793388248.139:1553): avc: denied { mounton } for pid=10520 comm="syz.5.2457" path="/file0" dev="ramfs" ino=31696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 202.436943][ T29] audit: type=1326 audit(1793388248.359:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.437025][ T29] audit: type=1326 audit(1793388248.359:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.437059][ T29] audit: type=1326 audit(1793388248.359:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.437345][ T29] audit: type=1326 audit(1793388248.359:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.437560][ T29] audit: type=1326 audit(1793388248.359:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.437597][ T29] audit: type=1326 audit(1793388248.359:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.438049][ T29] audit: type=1326 audit(1793388248.359:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.1.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880540f559 code=0x7ffc0000 [ 202.880060][T10564] loop0: detected capacity change from 0 to 512 [ 202.881577][T10564] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 202.881594][T10564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.921328][T10564] EXT4-fs error (device loop0): ext4_free_branches:1040: inode #16: comm syz.0.2473: invalid indirect mapped block 32768 (level 2) [ 202.921375][T10564] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 202.921788][T10564] EXT4-fs (loop0): 1 orphan inode deleted [ 202.921853][T10564] EXT4-fs (loop0): 1 truncate cleaned up [ 202.922298][T10564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.927644][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 202.927680][ T29] audit: type=1400 audit(1793388248.849:1622): avc: denied { write } for pid=10563 comm="syz.0.2473" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.001403][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.272767][T10575] loop0: detected capacity change from 0 to 512 [ 203.498154][T10602] loop6: detected capacity change from 0 to 1764 [ 203.576190][T10604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 204.488273][T10607] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.692918][ T29] audit: type=1400 audit(1793388250.619:1623): avc: denied { append } for pid=10630 comm="syz.6.2494" name="trace_pipe_raw" dev="tracefs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 204.832925][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'. [ 204.833095][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'. [ 205.004040][T10665] loop6: detected capacity change from 0 to 512 [ 205.004617][T10662] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2507'. [ 205.023870][T10665] ext4: Unknown parameter 'fowner>00000000000000000000' [ 205.480508][ T29] audit: type=1400 audit(1793388251.409:1624): avc: denied { unmount } for pid=6514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 205.778035][ T29] audit: type=1400 audit(1793388251.699:1625): avc: denied { mounton } for pid=10687 comm="syz.0.2518" path="/file0" dev="autofs" ino=32872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 205.778442][ T29] audit: type=1400 audit(1793388251.709:1626): avc: denied { remount } for pid=10687 comm="syz.0.2518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 205.930618][T10684] ================================================================== [ 205.930676][T10684] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 205.930743][T10684] [ 205.930751][T10684] write to 0xffff88810c4fca60 of 8 bytes by task 10682 on cpu 0: [ 205.930773][T10684] shmem_file_splice_read+0x3eb/0x570 [ 205.930807][T10684] splice_direct_to_actor+0x25d/0x680 [ 205.930829][T10684] do_splice_direct+0x119/0x1a0 [ 205.930855][T10684] do_sendfile+0x37d/0x640 [ 205.930882][T10684] __x64_sys_sendfile64+0x105/0x150 [ 205.930909][T10684] x64_sys_call+0x1015/0x2550 [ 205.930942][T10684] do_syscall_64+0x112/0x360 [ 205.930971][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.930993][T10684] [ 205.931001][T10684] write to 0xffff88810c4fca60 of 8 bytes by task 10684 on cpu 1: [ 205.931023][T10684] shmem_file_splice_read+0x3eb/0x570 [ 205.931068][T10684] splice_direct_to_actor+0x25d/0x680 [ 205.931097][T10684] do_splice_direct+0x119/0x1a0 [ 205.931122][T10684] do_sendfile+0x37d/0x640 [ 205.931141][T10684] __x64_sys_sendfile64+0x105/0x150 [ 205.931162][T10684] x64_sys_call+0x1015/0x2550 [ 205.931198][T10684] do_syscall_64+0x112/0x360 [ 205.931237][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.931265][T10684] [ 205.931269][T10684] value changed: 0x0000000000017bb4 -> 0x0000000000017bd5 [ 205.931281][T10684] [ 205.931284][T10684] Reported by Kernel Concurrency Sanitizer on: [ 205.931299][T10684] CPU: 1 UID: 0 PID: 10684 Comm: syz.6.2515 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 205.931328][T10684] Tainted: [W]=WARN [ 205.931335][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.931353][T10684] ================================================================== [ 206.293418][ T29] audit: type=1400 audit(1793388252.209:1627): avc: denied { write } for pid=10694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.334719][ T29] audit: type=1400 audit(1793388252.259:1628): avc: denied { write } for pid=10705 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.591613][ T29] audit: type=1400 audit(1793388252.519:1629): avc: denied { write } for pid=10708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.633523][ T29] audit: type=1400 audit(1793388252.559:1630): avc: denied { write } for pid=10719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.075747][ T29] audit: type=1400 audit(1793388252.999:1631): avc: denied { write } for pid=10722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.155492][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 208.155512][ T29] audit: type=1400 audit(1793388254.079:1633): avc: denied { write } for pid=10736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.204465][ T29] audit: type=1400 audit(1793388254.129:1634): avc: denied { write } for pid=10747 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1